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{54} System for controlling the sissiH&utton ami use of digital works 



{5?) A sysrern tor eomroi&iq use and distribution of 
t%itaf works, in which the omm of a diysfaf work fid J 
attaches usa<?<§ hghfs ilQS; ic thai work. Usags rights 
are giamcd fey thfc "owner* oi & digi^e vvork to "buyers'' 
of the dsojtei wo;k The- usage nghis detin® how a dtgisai 
work may be easti and furihe-r distributes by She buyer 
Each »gHi has associated vvsth i; cona« opSrona} spac* 
iticabons wdish m$m ths condKsoos snd fees upor> 
which trss sigh; may be osercisc-d. Dioj&i works s«s 
stored in a repository A reposrSosy wsi process each re- 
quest (103.104) to access & digitei work by exwtfrong 
the corresponding usage rights it 05). Digits! «*orkj>tey- 
fcaeie devfcfss, eoupisd lo the repository containing she 
work, are usees to pisy. Qispiay or prm; she swsrk. Access 
to Agitai works for ths purposes of transporting dsiwsen 
ropossionss; (e.g. copying, Porrcwsg or irsosfsr > ts s«r- 
ileb out using a digits! work- transport protocol Access 
to digitai warte for she puiposse oi nspiey dy a digim! 
worss pfeyteis gwmte.g. pooling', cs is? siaying or jsxsc-ri ■ 
snai ss oarrisd out usinq s ciigitsi sorfc piayback protocoL 
Access is disntssd {108} or grsmled {107} depending 
whssner the requesting repository has ths rsquirocs m- 
ago fights. 
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Description 

The present invent :on relates to the field of distribution and «sa$s rs^his sntorcemen! for digitally encoded wor&s. 

A turtdamentai mm facing ths publishing and lnSonr:atlon industries as they consider eiectronic publishing is how 
•s So pt raven- she vsnaoihoroed and unaccounted dtoMoti or ta;a«s of etseirootcaiiy published mandate. Electronically 
published rnaisdals are sypicaiiy distributed in a digital torm and msrsaied on a computer eased system having ins 
capability so recrasts Shi; materials. Audio and video recordings. soHvrars, books and r-nuitlmsdla wotks as© asl being 
oieoifonfcaiiy pubirsrsed. Companies in tfsess. trtc-osirms receive roywas for sash m-sxiraed for deia-sry of fhti mate- 
rials, e g. the sale of an audio CD at a mtali outlet. Any unaccounted distribution ot a vsors mates in an unpasei royalty 
?<5 (e.g. copying tha siudso records-ia CD to another digital medium.) 

The aase in which etsciroaicaiiy published works nan be ^ejtscij^" reproduced arid dislnbuted is a major concern, 
'fbe transmission oi digital works over networks ss comrrsonoteee One sash widely used network is \m internet. The 
Sntamst ss a vwdssprsad netvsorktaalliiy by which computer users m many universities, corporations and government 
t^ttes communicate and trade ideas arid trabmtatron. Consular fcuiiisfin boards found on she internet anci comrfiorcssi 
« network&sucn as CompuSery csncs Prodioy aiioa? tor the pcsiinsand retrte«OGt digital irrformetion infarnaison serystes 
such as Dialog a<x» i.EXlS/hiEXIS provide databases o? cw«m information or; a wide variety o? top i A x 1* facto; 
wttish witt awscestiale trie situation la the development and axpsoston of the Nahooaf informaUon intrastnjefws dbs 
NM}. it & antsespatod thai, as the Ha grows, ins tssmreissson erf cisgiiai works over networks <m increase mar^* times 
over it would be desirable to uifce lbs Nit for drsmbanon of dtgltai works wahaui the tea of widos.n o { ^ snShor^iid 
r.cpvmg. 

Ths rnosi s,t:atobi!o:'wa:xi way ;o cu?b sec c-un-ed eiisifitmiiw is to prsv<jn; un«yibor«ed cop*, nc - \i ^raism*- 
sson. For sxistsrsg rfiatsnais IhsS are dissiabuied in dtgsJaS itsm. various ss'agnaidsi ars u&sd. if? tfts cssss of sdivsara 
copy p;oios!:on sshsrsos whicd W tm ttwtow <sl ca&m fbat oars bs m<Jds or whicn cor n.fp; fha ouipijt whan copyins. 
is dsissteci have been sir:pfoysd. Another sohsme causes saftwaie so tjecoms disaDied aftsr a prscfetsrmwd period 
of tsrm tKss feps«d. A faebnique iisod for worksiafson twsd soffwarn ia jo njqniio that a apoctai fiardw;sri3 dnvioa trsiis! 
bepfssonicntha xvorksialion in order forths software lo ran, e.g.. sss US-A-4.9S2..0S4 sn!!tfsd >: ?yieibodarid Apparaius 
lor Protecting Compiitsf SoTttwe Utitabg Coded FM& U&mskir, Coniancrion with an Active Codsd Hardware Devscs. 
" Soeh dovscss am provided wifb she aoftwafe aod ar® oawnoniy -ofornsd to as donates 

Yet anotnef schema is to distribute sofiwara. hut wssob rsquij'as a "Key'' to enafois sfs use This is smpioysd in 
se distfibyiion schames whaw 'demos 0 of the soit^ra are prodded on a awfom afong wirh rhs antirc< proauct. The 
dames oan da tfosty used, bus in orcte? to ;jso m acfyai product, fba Hey must de psreasssd. 1>;esc aohesros do nof 
binder eopyidg of the software once the key is idstesy pcrchassd. 

it is an ob|aci of the prosen; frsvantir»5 to prcwido an tmpsovad aysiera aad ;nett)od fot conttoiimg tha uss and 
distribution of digitai works. 

The invention accomingty provides a system and method as claimed in the accompanying ciaims- 

AsysJiarTifo: contraiiinq nss and disirfcatsonoi digitai works is disofossd. A digital work ss any writtery aural graph- 
ica! or video based vaarlt inciiiding oonpaisr pt®qt&fn$ that has been transiated fo or created t« a dlcita! torn, and 
wbict; cars be recreated using susiabia iersderifip maans sucti as software programs. Ida prassr;! iiivstifiors allows ths 
ow\& oi a dsgrial work to attach csaga oghts ;o ths wot . The usage aqbta for tne x^ofh aofine fiow if nray bs used &m 
•so distributed Digiiai wodss and their usage fiobis are stored tn a secure rspositay Digitai worse msy enty be accessed 
by mm seecre repositonos. 

Usaqe hgtiis fa; a digital weak a-e strstsxiisd :n a fiaxibie and «xtans:bia nsaqo iiotiia giisrafnat Consapteaiiy a 
nght la the usage ngnts grammar s a iabet attacbed to a predetermined Pehavier and conditions to exercising the nght, 
For ssarnpte a COPY sight dstiotcs !bai a copy o! ins digital work ;;iay be mads. A conditio:'! to sxaiosstng tl'sa ngbl « 
tse fsqusstsr mosl paas ceaain sesnnty srSaba. Coiiaitions nsay aiso be aftasbea to limit the nshi itssil For sxampie, 
a IO.AM right may oe defined so as io iimii 'he duration ot which a worfs may no tom&s. Gondiiions may atso mciuas 
mpyifernents that less bo pa:d. 

A- repository is comprised of a storage means tor stonng a digiiai work and its attached usage fights, an sxtemai 
interlace for receiving snot transmitting «a!»! a processor and a clock. A fe&ostoy has Iwo pwmy operatirig modes, 
a ssrvsr roods and a requester mode When operating in a server mode, the repository is responding ;o asqassts io 
access digital vtforks, vVnen opamting m rsquBstsr moos, the repository ia esqussting access to a digitai work. 

Qsnssaiiy a rspoe«tory wtfi process aacb request io access a dipstai work by examining the work's usage rights. 
For ossarnpia. in a request to mfc.® a. copy of a d:g(iai work, the digitai work as r?»sfcinad to sea if rigt-is tiavo bean 
gcanfed which would allow copies io be given out. It sacb a right has bean granted, then conditions to axemiss of the 
•ss ngi'ii ara chaoked fe.g. « agtit lo maka 2 copses), it r»i>dltlons associated wim the right are aalssasd, ttie copy cars be 
mjide. Balors transporting tne digirai work, any specified changes to the set of usage ngdts sn ilia copy ara attached 
to tse copy oi lbs digital work. 

Repostionss communicate mam® * sat of repository trarisactssns: The leoosslory transaciions embooy a sat of 
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protects for establishing seeurs ssssssm connections: mimm repositofi&s, and for processing access requests to 
the digits! works. 

DroiteS works are recreated on rendering systems. A rendering system ;$ comprised of s* toss a tmts&mQ repository 
and a rendering device (e.g. a printer, diepiay or audio system.; Rendering systems are internally secure. Assess to 
•5 digrtai works rsei corslatrsad wthm she tendering repository ss accomplished via repository transactions wish ao external 
repository containing me desired digrtai work 

A system and method m accordance with she Invention wil! now be described, by way of exampie. with i«fsr©ncs 
to the accompanying drawings, in which • 

■Figure 1 is a flowchart rifussrasing a simple instantiation of- tfc& operation o* the eurrsntiy preferred embodiment of 
?C the ptosee! invention. 

f igure 8 is a btc>:;k diagram (iterating she various repossoty types and -ho repository transactor; flow between 
thsm m the currently preferred emsxsdsmen: ot she present invention. 

Figure 3 is a block diagram of a reposttosy coupfed with a credit server in the currsnfiy psisferrad errifeodtrees-rs oi 
tfte present if;v<sni-on 

« Figures 4a and 4i> are examples of rendering systems may be yt!i«eei in she ctwenti* preferred embodiment 
of she present Invention. 

Figure 5 riiusiraies a contents file layout for adigitai work as may bo u?iitrasd bi the current!? prolerred smbodrnieni 
oi jn« present mvenison 

Figure 6 illustrates a contents file layout to: an indsvsduai dlgirai work of she dsgtta! worit oi F Igare 3 as rtsay da 
utilizes m the currently pretarrod smbodimeoi of lbs present Inverasoo. 

Figure ? iifustratos the components ot a description brock ot the currently preferred embodiment ot the present 

tnmftm. 

Figure 8 Illustrates a description tree for she contents isss iayont of the digital work iili3strafsd m Figaro 5. 

Figure 9 iiiustrafss a portion of a description tree corresponding to the individual digital work sisusfrsted in Figure 6. 

Figure t G lilnstiatss 3 fayois for the rights portion ot a description block as may ho nitfeed ifs she ctersntty preferred 
embodiment of the present invention. 

Figure n is a cte&c-fjpucn irse wherein centssin cf-blrx.ks heve PRINT nsags rights- and Is used to iikiSlrats : 'ettls5 s 
arid loniafi!" swtes for resolving usago rights convicts. 

Figars 1 a ss a block diagram oi the hardware components ot a repository as arrs mimS in tne curr sntiy prnforroo 
-Si> snibocfiment ot tne present snvemm 

Figirre iSfea block dittgram of tbo fanciioitai ;log:oai! oomponants ot a repository m ara ussiix^d it? the caiiOitiiy 
pfeferred embodiment of the present invention. 

Figu;e ": 4 is tiiagtarrr iiinstraSsncs fhe haste oorfipor-onts of a usag« rsgfii sn tt5a enrfonity prolofrad ©rsstsoditnwt of 
tho pffssoa; mvom'rori. 

;k Fsgnre 16 lists tbe usage rights grammar ot the currently prefen-ap embodiment or tba pmseat invention. 

Figure i8 Is a flowchart lllostranng the steps o! certificate dekvsty. horiiB! ct?ecking end psrfortnartcs testing as 
perfoi-med in a iegisirsfion transacijon as may bo performed in tho cunentty pisferrsd embodiment ot the present 
inve-nttofs. 

Figata t ? is a flowchart sliiisiraiing she steps of sessior; irvksmiafion ijxehtjngo aorf eioctt syriotrnsfji^rstiois as may 
•so be performed m the currantty pmisrreo smbooifnent of ine present iovoniicn, after each roposiiory sn tno rogtstration 
transasfion has aiioesssf nlly eompiatsd the stsps described In Flgum 1 S. 

Figure !S is a flowchart iitaeimilfsg shs basic fiow for ;s usagss banoscfiOf:. ifjokjciirsg the oortrmor; opanifig and 
closing step, as may he porlormeo sn the cetrehtly proismsd embodiment of the presont invention. 

Figure 1 9 is a stale diagram of server and client ieposlrorios m aceorPanca writs a transport protocol iotiowad when 
*s moving a ciigrlai work from tba server so tbo ciiera repositories. ;ts mtty bs oariormaa m the currsntty preterms ambod- 
smehf: of the present invention. 

vC A system for contfoibng oso and disrrrbntion of digrtrrii worsts ss disciosrici. The present (nvsntson is directed io 

supporting oontmemlal transactions invoivtag digltai works. 

Heretr; ffse terms 'diojfSti work*, 'wonc' and 'content-* reie; - io any wor k ibat has been tedecad so a ctp&i tepte- 
soriraiion. This woold incujde ;sny audio, video, tasl. or musliimeriia wrsrk and any aceorripanyiog interpreter fag, soft- 
wars) thar may be feoatmd for rsscrsating to© work. The term composite work rotors to a digital wofis comprised of a 
•ss co»ectior5 of tshet d^ttal mtkst Thetorm 'usage rigfits" or "trghte" & aterrrs wtiton refers to rt$)ts. grarsted to a recipient 
of 8 digital wor«. Qenaraiiy. tbese rights daime how a digssai work can Oe used and ti it tmn bs farlherdistribriied. Bacft 
ysase rigbr may havs one or ittore specified conditions wbtcn must be sattsitsd esters fns dijht may foe exorcises. 
Frguia r :s a brqh level flowchart omitting vartoos detasis but wbroh demonstrates the basse operafion ot the present 
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invention. Referring to Fi{j«f« i . a creator creases a digrtaf work. §i«p 1-Q1. The cn&ator wii! then, determine apsroariats 
usage npois and fees ; sttsach theni to ihe digital m?k. and slors tham m Rss>mBOfy 1 : Step 102 The ^terosrsatiori «f 
appropriate «sa$e rights and toss wffi depend on various ©conomsc fetors. The digital worft rsmsms seeareiy in Re- 
pository 1 until & rcqijesi tot access is received. The rsqwsr for aocesa begins with a session initiation by another 
* repository. Hens a Bsposiiory 2 intetes a session wtfh Bsposiiory t, srep lOS. As wsii Us dsscribsei In greater rMali 
foe-ow. thss session initiation mercies st&ps wfwe* herps to insure that ths taspecitve repositories «r* trustworthy As- 
suming thai a ssssson can Pa estatjilshed. Repository £ way than requast access so shs Digital Work tor a siatsd 
purpose, step "S04 The purpose may be, tor 0JS3«ipl« : so print m« dlgrtai work or to antom a copy of digiisl work. 
The purpose wot correspond toa specie usage ngnt in sny event. Repository i chocks the esacfe rights assosrated 
to with she digital work to detsmilne if the access to the digital work may ba granted, mp 106 The chock of ihe usage 
oghts essentially involves a determination of whether a right assrs;»stsd wish the across request has been attached to 
ths digits; work and if m conditions assocrafed With ihe ngnt are satisfied it ths assess is <$m\m. rspositoty t isrmtnatss 
ths sossion wth an error message : stsp 106. ii access is granted, repostfoty 1 transmits the digital work to reposrtoty 
2. step 107 Once the csrgjsat work has been trartsmsfteo - to repository 2. repository • and £ each generate bism§ Wor- 
ts mailon tor the assess which is transmitted to a credit server stsp 108, Such doubts billing reportiaa is dons so iossjm 
agasnsfi attsfr^s so citewnvsnt ihs btfljog procsss 

Frorifs 2 (iii)stratos tho oasw interactions bsiswR f^scssaofy types in ths prssoni inveritiao. As s/iii sesorne apr>at m\ 
ftom Fiigtire S, Ehs various rsposstcrv rypes wtSi ssrvs oirTs rent iirnetsons U is tunciamootat that repositooss wstt stsars 
a coro 88! ol tufjotiofjaSriy which wisi enable sBcafe and trustor! co*mr\«nratK5?)s. Roiaa:ing to Figure 2. a raposSoty 
fiOi represents ihe ijefisre-i snstense of a repository The repository 20 J has w> modes ot operation; a server stiode 
and s rsquestst mods. Whan in the ssrvst 'rnods. the mposiiory wiii foe i eesivrng ana processing access rsqussts to 
dtgiiat works: Whafi in the raquaoter roode. toe rspositoty writ b« itjinatirsg rsquasls io access digirai wotks. ReposrEoty 
381 is peoorai m the senss that its primary purpose is as an exchangs medium tor dfgiiai vswss. Daring toe course oi 
opsrsiiron. ifie repository 20 i n-isy eorntoijni-cais with s piisraiiiy ot other rspoiiiones. narneiy authowatiort repository 
5S52. fondrsrsfip fspcsssSssy 20S and mssiet repossksry 204. Cornniafiicatiofi beiwear; rcfsositrjnea occuts uSiiizifsg a re- 
pository transasrieft proiocoi 20&. 

Ootor-nymcation wrih an authorisation reposiiory 202 rfiay occur whan a digital workbstoo ecsossed has n consMw 
requiting an auihoo^atioii Concepiuaity as? a«iho(teat«K) is a digital cnrslficato each that possession oi tho carirhcate 
is required to gain assess to ths drgitei wot!?. An authcri^aiion rs iisss't a draitei work -naS can hs niotrsd oetisrssn 
s>? repositories and snhiecrod io teas and usage rights, conditions An authorisation rrvsj? »s roqeired by both reijosttoriss 
rnvolvrsd in an assess to a dsgitai v»ork. 

Cornrnunlcation with a rsnder'ing rsposriory 203 occurs en oonnectioo with ihe tondarlng ot a digrtai w<rjfk. As wsri 
Prs dascriPaa In greaii;r datall beiowr, a rancianag ropoatifiry la coupieO wftb a ratibefing davtce (e.g. a prrrjiar davrca} 
to coTiprise a ranoor'ing system 
;k Comniunloation with a master repository 205 occrjrs m connection with ohtaiuinq an identification certificate, iden- 
tiliDatxm ca;!ificat;;s atstns means by which a repository ss idsntiried as "trostwor-ny'r Tt;e use of k^slfioatrcsr) carhi- 
icatas Is c-ascribssi bsiow vvsth respeci to me registration transaction. 

Figrsro 3 iiiustostes the repository 201 coupted to a cradrt server 301. Ths credit server 30 1 is a oiavics which 
ascurnuiates bliiifig information tor the repository 201. The arabs snrver 301 consmursisaies writ: ropoeitrsy 201 via 
-rs foiliing transeciions 302 to record htlling transeciions. Biiiing transactions are reported to a bilisng siearrnghoase 303 
by tha credit server 301 on a periodic basis. Ths crsda ssrvst 301 cornmunicatss to ths biisina clear Ingiiouas 303 via 
cissarlfjghorise iransaciior^s 304 The cieannghousa trarisacrioas 304 anabia a sacare and eneryptad transmission of 
intonation to the biiiiog cteafingnouss 303. 

A rsrtoeisng system ts qeneraiiy defined as a systerrt comprising a repository and a rendering device which can 
render a digiial vsotk into its daairecs form. Enrarnpies oi a fendsrsng system may be a cornptr-er sysiem. a digrfai artoto 
system or a punier A rendering sysrem has the samo sacorrty iestrsrss as a roposiioiy The oouptii^g of a rettoanng 
vC repository with ths rendering device nsay .occur tn a rnanner sosahie for she type of rendering device. 

Figaro 43 rlfustrarss a printer as an esamp-s ot a rendering sysrsm, Referrinq to Figure 4, printer sysiorti 401 has 
contained therein a sontsr repository 402 and a pnn; d«v«€ 403. it should be noted that the ihe dashed tine defining 
pt Inter syssem 401 dstrnes a secure system bo;jndrsry Commur)k;i3ttGos wkh:n ths boisndary ate iissnmed io be secure. 
Oapsnding oe ids security isver. the boundary also represents a narrlsr intsndsd to provide physicai imogrrty: The 
•ss prinisr repository 402 :s an msu»nt<abon ot it?e senderitsg reposiiory 205 ot Fioui-e 2. The printer repository 402 wsii m 
some insjancss ccntr-in an epnatrssmi copy of a digth-i work which remains unfit rt ;s ptiniad our by toe punt engine 
403. in other instances., the printer repository 402 may contain digital worte scon as fonts, which writ remain and can 
Pe Pitied oased on use. This design assures that ail cooimuniesSion Sines oehvsen pr:niers and punts'io. oeviees are 
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encrypted, unless thsy are «$fw a gnysfcaliy secure feoyrxsary This design testers ssaminam a potentlat "fault* point 
through whieh ths dsgstai aerk couics tss inipfoperfy mmen The pnnierdeviee 403 reprsssnis she printer components- 
usee to creas sns printed otopai. 

Aiso sSiuiiif stEsd sn Figure 4a is the repository 404- The repository 404 & couipfed to the primer repository 402. The 

•5 repository 404 represents an sxtsmsl repository which cor;;a:ns digitoi works. 

Figure 4b is an oxer-ipfe of a oomomer system as a canctemg system A comp^i'sr system may constitute a *>*«!{!• 
tanettw!* dsvtce since i; rosy execute dpsa! works tag. sottvyare progmros) and display digital works {s.a a digitized 
photograph;. Logieaiiy, each rersdsrsri!} device can be viewed as having its o\ss« tepostsory, ai-hough onSy en* pnysicai 
repository tsaeeoed Referring to Figure 4b. a computer system 4:0 has cantos-ied therein a asspfey/exscution ropos- 

to story 411 . The dispiay/sseceijoo repository 4 1 ? iseousled to display device, 41 £ and execution devsce 4 53. The cashed 
box sreToundlng the computer sys-em 410 represents a sseurisy boundary within vtoieh ajmrnwicssioriti am assur ned 
to t>s s*c.«r«. Tiis dispiay/exscution repository 411 is fsrttier coupied to a credit server 414 to report soy tees te be 
biiied for access te a digisai work and a repository 415 for asxessrrsg digltai works stored Bssrw. 

Usage rights are snachrso' diraetiy to digrtoi works. thus.. ;i is imper-ani so understand she structure of a digjiiai work. 
The structure o! s digital work, in c*irtici,-iar composite digital works, may bs naturaiiy orgsnteecs mio m wyctic sir ueiur e 
such as a hierarchy. For exampie, a magazine has various atonies arid photographs v*h«5ft may have beet? eraatsd 
ana are ewssd by oiffsrsnt porsons. Each of the articles and photographs may represent a nods m a hie-arohtoai 
structure. Consequently, oonfrois. i.e. ussage rights, may be piacscs an each node by toe creator: By enabling cerasof 
arid fee hrlflog So da associated wiih each nods, a creator of & work cm he assured ihas toe nghts and Sees are not 

in me tuffsntsy prefenoci ^bodsmsrst the hie intoffrs&sion for a atrial wwk f & divided into two hies a "consents' 
tiie ;snrJ a k dascrip!ioa ires* m. Frws toa perspective d a iepJBtiory. tori "r»«tents* i'fie ss <s stream ol adc'rsBsabio 
hyles vs^c5S« torrrra} depends eoropteteiy on !he ioierpreisr r;ssd to piay. sispiay or orsnt toe digitai work 7'ne dsscrtj^kxv 
itm ?>!e rnakee « poseibie ?o examine the ngms arid toes tor a work wirhoy! referanee \o the comeni oi the digital work, 
ft abouici be rsoieci toai ihe tears description iree as uaosi bei etrs refers to any type of acycisc strijctuie usod to represent 
She relationship bo;«reei) too various components of s digaai work 

se Figure 5 (Iterates the teyont c;f a conie^te fiia. Referring ;o Figure 5. h dtgiiai work is comprised ot &5ory A 510 
aciv-tosernent Sll. iSory B Slf; arid siory O Si 3. « rs assurrssd that iho otgltsj work ss sfored atiKftog at a reiaiivrs 
address of 0. Easts of toe parts of the digrtol work, are stored iirisarly so that story A 5 10 ss stored at approxsmateiy 
addresses 0-SO.OOO. adver-ises-fiant Sit at addresses 30.001-40.000; story 8 512 at addresses 40.001-60.000 and 
story C 513 at address** 60,001 -85K. Tho cisfaii of story A 510 is iiiiishafed in Figure S Fisforring So Figure 6. th3 

;k story A 510 & ftirttw broken dowsi io show texf 614 stored at address 0-1500, soidier photo 815 at addresses 
1 501-10.000 gtaphfcs 61 8 stored a; addresser; 1O.OO1 - 25.000 arid sidebar 617 stored address 25,00^,000. Motes 
that the daia to ihe contents fiie may he compressed {for saving storage; or enosypted ffcr security). 

From Figures 5 and 0 U is roadsiy observed thai a digiiai work can fee represented by iss eomporierii parte as a 
hierarchy Ti)e desr:ripiros5 sree for a dsaitoi work rs corriprisrsd of a set of raia-ed descriptor bioeKs t;1toit;cks). Tne 

•r-e eotoents of eacndtolock is described wrrih respeci io Figure 7. Reierr:agtoF)gpfe?.adtoiocs 700 so ciijdes an idenfifier 
70 1 which is a ensgue identifier tor riie work in toe repository, a starting address 702 providing ihe siari address ot too 
first byte of she woto. a icnpih 703 giving toe eyirider oi oytos in tfie work, a rights porhoi! 704 wfvereii? it;c gi'anied 
usage rsgnts and their status data are maintained, a parent pointer 70S for pointing io a gar en; d-biock and &m pointers 
706 to; pointing to the cf-ifd d-feiocks. in the cerrenhy preferred smbodiment. the idetorfie:; 701 has two parts. 7"he first 

*s p;3ri e; a ankias fsmr^ber assigned to fhe repository upon rtmvfamw. Tne second pari rs a unrqoa nuniber assigned 
fo the work cpon creahon. The rights portion 704 w«i contain a daia sfrrieture. sued as a fook-cp ishie. vvheram toe 
var ioue ir^oarsarion associated with a right is maintained. The tnfomiaiion rogeired by the respective esa^e sights is 
described m rrirere dstasr fegiow: D-biccxs forrn a strict hisrarchy The tog dtoiock o! a work nas no parent; aii othsr d- 
diocks hava one pasersi. The relationship of esape rsgfiis hatweer? parent and child d-biecks and how conflicts are 

5b msoivsd fe described bsiow 

A sgrsciai type of d-bfock is a tobsii 1, d-biock. A shefs d-btek adds no new content beyond the somen! ot its pads. 
A she i i d-biock is used to add rights and fee mfomiaSton, iypioaiiy by distributors of dipitai works. 

Figure S iiiusiiiafss a deeenption tree ior ihe digiias work of Figure 5 Rsierring to Figure S : a top d-biock S20 for 
the drgitai work points to the various stories and advoffisotoptos contained therein i-tore. )he too d*iockS20 points so 
dtobek 82t ii-ep^senttn;) story A.StO). d-biock 822 impmseesing the advehisensent 511 -. d-biock 82S {representing 
story S 5; 21 ancs and d-biock S24 irepresonting story C 51 3). 

Ths pofttevot ihe description tree for Sfory A 510 <$ tiiusttoted In Figure 9. D-tilock §25 reprssents tski 614. d- 
hioek 926 represses- pfioio 615, d-biock S2? represents graphics S16 by and d-biock §23 repressiiis sidebar S17. 
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Tm rights person ?04 of a descriptor stock is kihher Wwtomsi m Figure 10. Figure so illustrates a sirrsemrs which 
is repeated im She nghts postm 704 tor each tfcjfct B«?emfi§ to Figure 10. sacs «8»t wtit have 3 right code fissid 10SQ 
and stems snfcirm&tsor? *m '5052 The right cods ttssd J 050 w«8 contain a wk&b eocte assigned to a ngnt Vhs sfatus 
information JiSici 105£ wtit contort information relating to she state of * tight and tha citgnai wosk Such information :s 
•5 indicated beiow « TabJs; 1 The nghte as stored m tee tights portion ?S4 tnay typicaiiy be m Rumsncat order based on 
tha ngnf code 

TABLE 1 



DIGITAL WORK STATE ^'FORMATION 


Property 




Use 


Capsss-in-Use 


Number 


A counter 0' the ni«?&er of copies of a work that are in use., incremented when 
nrtoihe; copy is us;jb ; decrsartcnted whet) use is completed 


Loan-T^ood 


Time-units 


Incticatof of«i» maximum tw&tm of lime-uosss ihat a cfcwyrnsrtt can be so*tn<xs 
oat 


Loans MDopy 


Booiean 


indicator that she current work is a loaned go! copy of m arrthorKed diglSat work. 


Remaining-Tltae 


Tsme-Unite 


Indicator of She iemalnmg lima of sis© or a metered document tight. 


DocbsTient-Dsecr 


String 


A string contesting various identifying tnfofmatton shout a ctocKnwit. The exact 
iormat oi this Is not spseifiod. bitt Is oars Inciutie Noertasion sush as a pub-iishet 
name, amat nm®. sSBN numbs:', and so 00. 




RO-Descr 


A handle ideftiifyina. a revenue owner for a dfcjrtei work. This re used tor reporting 
usssgs fees. 


Publication-Gate 


Oase--0& t »r 


Ine date that Jhe digital wrs was pnbiishad 


Hisiorv-llsi 


n>r>ivty~> 


A list of w«ms recording she repertories sad dates for operations that copy, 
transfer, backup, os restore a digstai work. 



The approach for ieptessrsimg. digSai works by separating description data {torts content assusnes shat pasts oi a 
iti<& kq. continuous mi takes no po&iiion on trie matt t$pt$$mi&*m tfi content, tn p&rlscufei. it ;s neutrai to Sbe question 
of whether oorstsnt ■epiessataSlori tray tete an ob;eci orit»ited approach, it would be natLitai to rsprasent content as 
objects. In pfifsciipic. « tray bacaivcrslen; to bavs cootant objects that Inoiude the btftng sitacitiio and ngbfs lnto-!Tia»lon 
ihaf !?. ropreseaJsd \r> tee d-biocks Sucn v-anatton?. sn tns design c* tne isptossntaiion ats possibte and are viabis 
aiiorrsaiivea bat tray mtroducs pro;;ess«rig ovorritjast. e.g. ihe Ifyiefproiaisos^ g! ihc objects. 

Digital works are siomd tn a repository as part of a hssrarcnicai tile system Fotdsrs tlatso temmt difsctofios and 
syb-dissctohes; contain the digit*!! «wk& as >volf as othsr toldors Digi&i works arsd tokiors in a toidor ars ordsred sr. 
SitphaPtsiscal o;des. The d:giiai works are typed to reflect how ibe fifes are used. Usape ngtm car; be attached to S'otdess 
so tha! the totder -ieeit ts as a d)§«st work. Access to tne feider woiifri than be bandied m tee same fashion as 
any osber digital work As will f)o described in rrsore deiaif betovs. the contents of the teidnraiS sybjsci torhe» own rlphts. 
Moreover, file rnanagement sights srsay be attas;hed io tnetoidst whtcb define how tosoer s;oni«5nts can be rnanageo. 



ATTACHiNG USASE RIGHTS TO A OfGITAL WORK 

is ts inntiamsntat to the prssent invention mat tne usage rights are treated as pah 0? the dsgssal worts. As the diaitas 
work is, dissnbutsd. the scope of she giaritod usage rights wsff remain the same or may be narrowed s ; o; ox\am&is. when 
a dsgiiei worK ss tsaneferreo from a doeerrsont server so a repository, the esssge npbts msiy insinoa tha rsght to ioan a 
copy tor a predsissmrrisd period of time icaifsd the onajnst rlgbtsr Wtm the rpposttor^ spans on; a copy ot tb© clioiiai 
work, \m ssage eghts in ths tassoer copy «Blled the next se; of tights? couid be soi to ptmM atiy 5 utibris rspsrf s to ban 
otsi rhe copy. The bssic idea Is thar one cannot grant more ngnts trran fbey have. 

TPs attasnmppt of ysago: rights ipso a digsfal work may in «• variety oi ways, ff the usage. rt^vs m oe tfts 
saroa for an erttirs mxK tbey cotsid be aifacfied mm the ospstai work s processed lor depossi sn tbe drglial work 
server, in the <sm of a ctipital work having different usage rights tor the various eoniponente. rhis can be done as the 
dtgltal wosk 1* Pesng c-'sated. At? autbonng soot or digstat work assembling fool could ho ulsfeed whscb provides for an 
antornatssd proeess of attaching ibe esage rights. 

As will Pe descrfbed below, when s digital work is copteci. transferred or to^ed, a hnexf ser or rights" cac be 
specified. T'hs-pext sst of rights* will ho atfacfted so ihd dtfia; worn as It is tras-jsporsed. 
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8*®0lvtn$i tkmffieiiiig Bights 

Bseaass each part fit a csgaat work may have «s <sm asatjo nghts.; thsre vwii fee instances whero tiio rights o» a 
"contained pan* are oltersnt from its parent or coraasrasr pari- A& a mu%. contiict rytes must essabi&hsd to die«s 
•5 when and tswa fight msy tss «xstctsed Ths bismtehica! sttuctore o! a diajsai wcstfc facilitates tn* soJcrfcsmtsrt of such 
ruiss A "strict* nrfe wxfld fee as ItiM- a «$tt for a part m a diktat »»rK is sanci toned (f a«d only if « is sanctioned 
tot the part, lor ancesios d-blocka aos-iialsimg She pan and for all descendant d-btacte. 8y sanctioned, it is meant tha- 
( > ■ each ot the rsspse&vs pans «&usi haw tne tight arid (2t any soraStsafts fot sxercissrso, «hg rsgfil are sairsfled. 
ft: also possible to smptemsns the present invention usinp, a more femem rule, in the mors lament rule, assess to 
f« ih<5 part may ba enabled to ths descendant pans wh:ch h%vs the right, but access is dsnisd to the descendants which 
do r -ot 

AsTOxarnpie of applying both m« *tr«t rate and foment is itiustrated vsrth retarenee to f^uto «. Referring to Rgure 
11, a root d-btock TiOl has shad d-biocks 1102-1105. jrt ibis rasa, rc-oS d-biock represents a fhaga^ne. and each of 
im cnsid o-niocks 11 OS-HQS represses axman i« im mn$a?.im. Suppose that g request is nrasS«s so PWffi tho digital 
« work sepressnted by root d-btock f 50'i wherem m strict fate is tcasovseo The f'gMs tor the root <3 -block 110; sndcMd 
d-bsocks 1102-t tOSars idea examined- Root b-bfrxk 1101 and child d-blocks 11 02 sod 1 105 bays been tpmM PRiNT 
rights. Child tRsSoc*. 1103 has net besss granted PR! NT rights a«rj dm <M»tock 1104 h&s PRiNT ngnis conditioned on 
payment os a asage tee. 

UBderthe slrtcl fuia 5ba PRiNT fip.hi can;i;S ba asartiaeP because -ha child P-biocKsJ;i;js net bava tba PKIHT < sght. 
se Under tfca isnifsnt rule, tbc rosaii weofef bs dtffswt Ths d-gifai works represented by cbsSd d-Siosks riOS and nos 
coasd bs onm®d and iha digital mfh. faprsssntfsd by d-biock 1104 could ba printad so long ss sbe ysaga fas is paid. 
Only iba dlgisai wotk raprassniad by d-bkxk 11 OS aouid not bo printed. Thus sums tesaft would bo acccsnpifsfind andar 
im strict fijfe if »>s requests vw«s m sctsti to nacb oi ;nc isPividaas dtgiSai works, 

The pmmt invention supports various c«ftteattoi§ of aitewlnp and disallowing sccass, rvtoreovsr as wiss bo 
da;si;r:bod bsiow. the asa^s nghts grgrmtsr pemtits Ihs ownct oi a dipiiai wo<H to specify ii consiraifite srssy b$ irspoasd 
on the work by a container pari lbs rnannsr in wtwcfc digit?;! works may no ssnctionsd bscat'ss ot asage nohts contiiots 
would be irnpiar^entatson specific rsrsd woaid depend on the nature oi the dipiiai works. 

$%> 

in tno dascapPos of Figiirs 2 ; it was indicated tnai rspositsssiss cafie in various forms. Aii repositonas ptwm a 
core set ot services for tno transmission of digital works. Tha mannsa in whicb dioaal works are axonangad la tha basss 
for ail iransacsion boiwaan roposiitonaa. Ids vanoaa laaosstosy tygos differ in tha aiiimain Unctions 5hat ibay panoari 
Rsposilofles niay no cisvioos tbomssivos. o- Ibey msy bo inoo-poraisd into olbsr systems An exarnpis is ;he rondsnng 
;?s msository 203 ot Figure 2, 

A repository wtii bave aasociatad wstb si a raposrtaiy idasi!it:af . Typically; tt?s repository idonisfier wosild ba a unique 
.nsir-boi asstfjned to tns teposiiory at me time oi .^anufacbae Each iepository wsii also be oiassstted as bsine in a 
paiiicaiar secaiity ciass, Cesiasrs cosnnisinications fisid tsarisact:ons n?ay be eosiditsoned on a ropository being in a 
panicnias sotarity cSass. Tha various saciinty classes are Pesciibsd in gresstef datttii betow. 
•so As a prsi-opuisits to operaiion. a repository v»fi roqaire possession oi m isentsticaison cenibeaSs. ideniffioaiior? 
coriincato® are esicrygted to pfevesit torgary and are issued by a Pastes repository A masses repository piays 9m rois 
oi m aaihosl^atiOfi agent is; enable leposifoslss to racoive dipyiai vwiaks idanillloatiOfi ceniiicaisB irsaai ba updated on 
a pariodlc basis, idoniificatiort certlfloatss aro descfibod in grossiar detaii beiow with respect to the reoisi ration irans- 
actlon. 

■® A ioposifosy htis both s hfiadwaso ano iynniionai embodiment Tha funcisonat wttotxlmiM. % iyp'csaty sottwtire 
executing on the Hardware ornf>odirr;en!. Alrernaiivsiy. tbe funcitonai omboOimsni may ne smbeddod in ;no bat&mrs 
embodlnieai sucb as an Appilcstioa Specific Integrated Csrcuri (ASiCi cbsp. 

Tho hardware dm&odittmt dt a i-cposilor y wiii no enclosed in a sscuts hotismg which sf srsmpromlscci . may eause 
the iogositoty to be disabiad The basse cors;pori8nts oi tbe hardware ert-oodiment oi a repository are described wrih 
i-aiofanas to Plgurn t 2 ; Betsmng to Figaro 'if?, a feposiiosy is coaiprssad of a procoassap means 1:200. storage system 
1 20?. clock 1 206 and ssstsrosi intor'acs 1206. Tha processinc! nisans ;20D Is comprised of a processor eiemenr 1 205 
and pi'ocassor memory 1202. Tbe processing raeana 5201 provides eonboties; seposisory transaction and usaije rlqhts 
irtsnsaeiie)ii Innciions ferine repository. Viafiixss functions in ihs operation of foe repository ss;eh as dociyption m&oc 
decornpfssslon ot bipiiial works and rranssction messages aro also pofiormod by the processing rnoans 1 200. "ns 

■ss prticessor etemeni 1201 may ba a microprocessor or oitter suitable oorrpjbng corjipos^ont. The processor memory 
1202woiiid!ypiea!!ybe farshsr comprised of Read Only rviornorses rptGisii; and Random Access ferneries ;FiAM}. Seen 
rnsmofios wouid conisln ;no software instruoiions utiifesd by the processor eismsni iSO t in performing the functions 
oi ihs repository 
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The storage system 1 207 is witm <xmp*m$ ot osscftptor storage 1 203 and centers scrags 1 204. The description 
xm storage- 1203 w$ sioa ihe descrtpiiort im tor tt» dipsfaf work snci she cornet storage w>tt st«"$ the associated 
content The descrsptioc Ires storage 1203 and consent siorap.e 1 204 nssd cot be at the same- type of storage medium, 
nor are they noeessaniy on the same physical device. So for exampls, ms descriptor storage i£0S may be stored on 
•5 a sostc; siate storage {for rapd sebisvai oi the time; ipbon tta© irkormationL white the coaton; stotacje 1.254 may be or; 
a capacity stores such as- an optical disk. 

Tim clock 120$ is csed to sints-stasnp vsrsc-us turn based conditions tor usasje ngbts of tot rnatonag asage fees 
wPrch may be associated wash ihe otgitij! works. Tno ciock wii; have an oniaief-i.ipiabie pamt suapiy e.g a 
fosttsry. m order to rnatetsio the io'egr ify ot inn t<m»-$E8mps. Tee sxteroal intsrtscs msara t £06 prsartc'ss tor ths signs! 
?<5 coniisoiion io other repositories and so a ensdi; server. The exseiTsai intsdaca means i2C6 provides tot the exchange 
oi signais via snob standard trsserfaces such as RS-232 or Parsons i Gqw&uw Manufacturer Card indtarsry Assoaasion 
{PCMCIA) stsncisrds. or FDD: The externa! sntsrtace means 1206 may also prevsds rsetowrk eonnechvrly 

Tim tnnciFonai smbodrrasnt of a rsp-oekory is daseneed wish teferettae So Figure t& Rstot-rngto Fsgnro 18. tha 
fcnetsort&i smfeocism^S is oorrsotissd of an operating system 1301. cer« repository services 1302. usage ttansaciso-n 
« hendiers 1303. repository specific mnestons ;304 and a user iiiierface ; 306. The opening system 130? is specific 
to ;hs rsposCosy aoo worsid typ:caiiy deper*« on the type oi ptoesseor oeinq usep Ths opes«tk?g sysien; \ 3L>! would 
aiso prwsfe tha basso setvtsss ior conUoiisng asxi iaisrfacfr-p b9:wes;o She basse norfiponsnis oi ifis roposiiory 

The core raposiiory ssfvfcss J302 comprise a &e> o! iuncifcms rsquireci fey sach and every reposiiory: Ths core 
roposssory services 1302 tnducte -ho ssssior; initiation Uarssaclsorss which ara doiiaed ia oasaiar dstaiS aeiow This sss 
oi sarvinss aiso inciades a gsnerje SicKst arjsn- ishicrs is ijsed to "puneff a ffipjiai tScsat and a penarie ai.rihor«a!»n 
sorver !or pre-eessing authorization soectiicattoca. OigiSai tiokefs and aaihOilzatisns am speoirio meohahisnw for con- 
Uoffing the disirsbunori and use of dig:tai works and are dssonbad :n aiose dsfctsi Poiovi? hioSs that coupisd tc she cors 
repossiory services sr« a piyraisiy o; idsoiiiipahos esriiticsiss 1300 Tha idsBiriipahor; esrsitieaiss 1306 are rsqiarsd io 
enable m ess ef the reposstosv. 

Tha usage Srariaaoboos haadica; 1 303 crsnpase Sanctroaaiity ior piocessing appose r eqijesis so dsgiiai ■mtks ar;0 
tor Bsiiiac; iess cased oc access. The usage transactions supp-oasd vsiii be dSereni ior eacc rsposiiory }y»e. Per sx- 
aiTtpie, s may not he coeessary ior seme raposiferies io handic access rcqeesis tor dsgiial works. 

Tha raposi;p:y spocisic iuriO'ionaiiiy 1304 eomp- ises innciionaiiiy ihai is ai^qtas to a saposirory Fo; etcaa^pis. the 
mastor repository hsisspeeiaifrinciionaiiiy ior issaingosgiiai csraiicatssacdrrsaioirisinino encrypJion i<sys. The rsposapry 
-Si> specific fenciionaiijy 1304 woyid inolada ins user interface tnipismsntaiion ior she repository. 

For sortie dsdita- works ihe fosses caused by any jnoividpal insiancs o- sjoanihon^ad copy:np is jnsigoiispan; and 
the chici scoconiic concern isee m assuring the coevsnienoe oi access and iow-ovei head biiiirrp. in seen cases, simpis 
a;xi inaxpenssva fiandheid raposisorias and i^ofwork-easod worKsEs&GRS may Oe ssiiabia ;eposi!orias oven tbougf; -ha 
measctes aces grjaranises oi secehiy are modest. 

A; the oti"ts; oxtran-is. some drgsiai worts such as a digriai copy oi a imi tw rmm or a bearss bond of siock 
«5rtito1o wt»jkS ba of vary high vaino so thai st is piudant So orapioy cautrcs? and tmify eiaborase «mtr«ty fnaasuras tcs 
•so snscre thai ffisy are not copied cr forgsb A reposfSosy sesiabie for hoidmg erscb a digstai work eoais have siaboreis 
rrmserss for ensering physicai iotsQrrsy and tor versfyinci actborizaiion heiete use, 

8y aa'arigrng a ursivarsai prouxos. aii kinds ot s'apasitoaes can coram rioioats with each oihar tr; prsricipie However, 
creaiors ot some works m wers; ro soecsiy shot ihcir vvoiks wiii oniy ba iFer.-slerf ed ;o jeposiforiss whose ievei oi &sc«r«y 
is high saosqh. For tm ;«ason. doeumsni reposiSonss have a tanking syaiani ior cfasess and tevsis ot saenrky The 
sapurssy ciassas :n sno cinrsnfiy preiarajo ansoodirnsnt a:re described in uinie S. 



TABLE 2 





RE pOSi TQRY' S£C UR! TV LEVELS 




Ltivai 


Doscapirrs? of Security 




9 


.Open syistem, Docytbent transfcission is ansncsypied. tVe digiiaf cer-iiicats is reqeired tor idsmiSicaiioc, 
Ths sseetity of the sysism dspecds mosiiy on oset honesty; sicca onfy niooesf knowiedge may bs needed 
to circamven! tha seoartty aioasuras. The ioposifoty has no provisioiis lor prevsnhrip. una^horiKed 
pfc^mrm from tacning«nd.acosssing or copying fiiss . Th® system doss not prevent the rsss or! removable 
sioraga and does not ehe;yp! stoted iiias. 




■ 


Minimai sacarity Like ihe previous class escept ihai sicred fries am rainimaiiy ancfyptad. incksding ones 
on removable storage. 
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TABLE 2 (continued) 



mpo&vcm secursty levels 


Levsi 


Dsscdpifcx 1 ! of Socabfy 


2 


Basts sscumy. like she previous eiass except Stat specie: took and knosviedge are required to 
campromiaa fna pfogasrrsmtrvg. the eonianta of the repository; or the state o; tns eioek. Ait atgstai 
confsmw.icaiiofts are 8r*c.fyp1«d. A diggai certificate is provided as sdaniificahon Medium ssv&i snerypiion 
is used. Repository tdantrficaiion number is Ufifofgea&ie, 




Genera; tecumy. Lists ihs pmm* cfass plus the tsqus^fmnt of specsa; tools arc needed to compromise 
5hs physical integrity os trt» repository and ih&t mocfesi encrypiion is usee' OS's aii tf8nsmjssto.*!&. Password 
protection is required to use the iocai nssr interface. The dlostaf ciock system cannot be reset without 
autPoniraison. No weak* wxsuks fee stored it. temovafcts storage. Whan executing wots as programs, St 
rens »mm m thsir o«m aodress space and doss no? gw© thsm direct access so any m storage or other 
memory coraainlog system cods or works. They can access works only through she transrra&ajort 
• raaw. \m P r oiosoi 


4 


Lske toe previous ciass except Shat h^h isvs^ ertorypison rs used on aii communicates. Sensors arc 
used to fecard aitampia at physicai and electronic !ampi5hnp After aunh tampering, the repoaitory wiit 
no! psjtcBrti &hw transactions *»m!f is hss reponsd such ismpamg to a designated server. 


5 


Uke ihe previous class exesps she; if the physical or dsgifat attempts at tempering exceed some psese; 
thrsahoida that tfcroassrt the physicai integrity d the repository or the iniegnfy of dio,siai and cryptographic 
oat her s. T-m me repository will saw only document description records of nfsiosy but w-sSi erase or destroy 
soy digpai identifiers that cosid be mrsiissd if reisasecf to an anscwiaow party it aiso modifies any 
canriicates of authenticity to indicate ihartne pnysieas system eae Pest; compromiseo. rt afso arases trse 
aa-itaais of dssignafed doctsneols 


g 


L:k<5 the pies':oy s ciaes exxspt thai the repository m mmpt ^fifste&s. eorne-iuaweiian to report tampering 
and ernpioy r;dsy aiarrns. 


10 


This ^oi.tsci correspond so a vory higb irsve: of security This server woiiiot maintain eoasfani 
corpi-i-iaeieeeoes to remote secsiiiy systee-ss reporiiae perssaptioas. eeaspr readings, end a5fe«p>ie to 
ctr c i j re vsnt ssssj r ii y. 



The charaasriKiisors cf sersa'ity irsveis dcseriijisd m Tiabio 2 ts itoS ieiej'sdiJd io be fewad. Mo-e ((r^offam ss this idea 
;k of having Siffsrent security aveis tor ciiiTsrersi repositories, if is eniJCjpeisd that esw security ciesses end rsqeircmsats 
wi avobs aeeoids'sg to soc»ai aitiiattoi-ss arid changes m ischr;oiogy 

•so A -mt rot«f}»M8 ;s cr«3dty «af:ned as trto mccharBSirs by which a user iafsriKis wm a rajxsiiiory if} order ;o tnvoks 
irsesaetiOi-is to qt:-,r> access to a cfigitat vvotk. a exercise esage rights. As described afxws. e repository may be era- 
isodsmS tn vaiioua totms, The aser irtteafacs to;' a rapoaitory wifi drffe; dspsftdsng or; tf-s paiticiiJisr embodiment The 
user interf ace tray be a graphite; assr ieieriaee having icons reprcsanisnp; the digsta! works and fhe various iranssotsons 
that may be perfornied The user interface may be s gseerated dialog ia which a user is pRrmptea for iriformeiion. 

The aser (rnsrsaca Saaif a©ad not be past of She repository. As a raposrioty nsay be arabadded ia sorrsa other davtse : 
fha user iriterfaca may merely he a part of ;ne devwo sn wpfch the repository is embedded. For sxarr!p;a the repository 
wM be omoeddeci in e °perd v that is inserted into an avaiiabfe siof in a wrnpom* system. The rrsof interface may be 
b coffibsfKBm cf a rffspiey, keyborsrd. ciifsof controi device and sottsaira axocuisng on tae eompijfef system 

At e rfttnirrairri. 5he eesr iaterfsce mast pewtt a user to input infomssiion such as .access ascfueefs end alpha 

se nasnartp data arid provido {eedtB.ckas so transaciion status. The eser ^seifaca eriii am causa she teposi;ory so snrtsa;e 
me sriiSahia ttanaficffoes tossrvscs toe reqrs&s!. Other facets of a partieu Sir user intarf ace Wiii depend on fhe h jncSionaiity 
that s repository wifi provide. 

CV&ll SERVgRS 

in tire piesattf invention, fees may be associated vrttfs She exercise of a rsghf The ieqairsfnern ior paymeni of tess 
is descfibed eriih each version of a usage right in toe esage rirsh-s ianpuaga. The recoiling and repopiag of such fees 
is psttom-isd by the erodii server One of fhe eapahiiities snahied by associating fees with hghSs ie the possfPiSify of 
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supporting a wide rsif-gsi of charging mossis. The simplest- model used by conventional sothwe. is thai there is is 
im af tm turn of purchase after winch the purchaser obtains unlimited rights to as« the work as ofisn and !of 
as long as he or she mots. Aiiarnaiive modets. irwiuae metered ass and variable fses. A single vsorK can have different 
tees tor different u&ss. For axsrnpie. vowing 3 photograph on a display ecu id im$<3®wm tees than making a fwScopy 

•5 or including * to a newly created serk. A key to these alternative charging modsls is So have a Sow overhead rtmm 
oi establishing Sees and accosjntinp. tor credit on these iraosaciions 

A credii server is a canpalatksi&l ayssesrt shaS rsiisbty ssjih«>2©s and iscotds these transactions- so thai fees afs 
billed and paid. The c redit sower reports i'aes io a biiogctesrlngbos&ia This nllling clearinghouse manages the financial 
transactions as insy ow As a lesuit. bifls may be- gens%}«« and accounts reconciled, piaisraoiy. the credit servar 

?<5 would store she im transactions ma panodSesliy cammmm vis a network wirh toe biisino clearinghouse for reeon- 
ciisnwn. In snch an embodiment, communications mh the biffing cisannghosase wjj-jW oe encrypted tor integrity and 
security reasons, in another embodiment, the credit server acts as a "debit card' where transactions oecor in heat- 
tsrne" againsi a asm account. 

A credit mwat ;s comprised oi memory, a processing, mmm. a ofock, and interface means tor co-jpiing to a as- 

« posiiory and a tlnarielai insiiiyison (e.g.. a modems, The credit server will also need to have security and aetheoiicattor; 
taociioriaitiy. These efsmenss are ssserateliy the same elements as thoss d a repo&fcsy. Thus, a single device can 
be both a repository and a ctmSit server, provided that ri: bos the appropriate processing elements lor carrying out -he 
corresponding ienci-ons and protocols. TypfeaHy; however; a orsdit sstvar vmM bs a csfd-sssd system sn -n« pos- 
session of tho ovvtser 0? !hs o-ed;-. The onsdi- sssvar is coupisri to a cepssHory arid would irasrae} via linanciai i;ans- 
an; ions as besnribod besow. interactions vwiii a iinanciai tnsiisnttoo may occur vsa protccois ostabiished by \m ttnancsai 
instiiiitions shemssivsis. 

in ids cu-Tsntiy p;eie;rod «f?5badimsi-ii credit sasvs-s assoosaisd v«th dotr; ;hs ssrvsr m& ths rspc-sitosy r epo-t ids 
iioanciai srsosactscsn :Othodi!i-f?p,ci<5ar!ngPouaa. For exarnpis. <mm aoirjijai te c&pm by or;$ repossSon/toanotPfsr 
tor a tee. crecM ssn/ets counted to each c-t the repositories va-i report ih« transaction to tde- biitsig ciearingt.'Onss. T'pis 
ss dijsiratsio m ihat i- snss-es shat s transaonon witt m aocoatjied -or k? this went of soma br«a« in tha communication 
between a crod-i server and tne bftiing daanngnot-se Howover some impismentaiions may ambody oniy a singie 
cr&di- server reporting the transaoiseh to minimixe transaction proeossing at the risk of iossng mm iransaaions. 

mm3m!i>.y®§si.m 

$%> 

Tha oresont )nvoa-ion uses sia-err5ante in a Ptgh lave! k «sage rights iangnagrf io define rights associated mm 
dtpitai works and their parts. Usape riphis sislsments are smptmQ hy repositories and ars u&ed to dets?Tnine what 
i-af}s;*ct{Oi;s car- oe srioorsssfsiiy oanicci on; to; a dipiiai work and assoto deSs-nisne pa-ars;ets-s to; {hose transactor. 
For exampie, sentences m ths iaapuage determino whether a given difjita- work can oe copied, vsheo and how st can 
;ts be at-ed. ane what i'ees i'i> any.; are to be charged ;or that nse Once ttie nsape righis staiements are ganemsed they 
are encoded in a smtaPie Son's ior eccsssiog dnrir-q trie processing oi transaaions. 

Oetin:ng csaoe rights in -errns of a ianpuage re combsaaiioa with -he hts^rchicaf reprssen-asioa ot a dig-iai wort; 
enabtes the sypport oi a wide variety of distribution and tee schersss At; essrspie is itio afotlity io nitaeh mcitipie 
varssrsns oi a right io a work So a croaio; may atisch a PRINT aoni -o rnake S copios to; SiO.OO anri a PRiNT rrgtss to 
•so maire urtMted copies tor $1 00.00. A pcrchaser may inen choose wdicn option nes! is; s his needs Another exampis 
ss that rights and loss are additive. So m The case ot a composite work, the rights and fees o? each of the components 
works is used in deieimiriiag the rights and fees -or she work as a whoie. 

The basic contenie ot a fight are ifS-JSifased in Figure 14. Referring io Figure 14. a right 1430 has a transactionai 
componersi 1451 anda speeifisafiorissomiponsnt 14S2. A right 1430 hasaiaba! (e.g. COPY or PBJNT) whists sndseatos 
■rs tne itse or oie-iibiinon ivfvftsges thai are emdrxised by she right. Tne insasisctfortai cor«poneat 14f;l corresponds to a 
particciar way in wbsefi a dipiiai work may be need or distribated. The transactionai component f4£i is iyoscatty em- 
bodied m software ihsircciiona in a repository which impismem ths use or dismPyiiOi-i pfiviteges for she right The 
specificatsnos conirxsneats 1 <s&2 are tssed to specify conditions vshioh must bssstisficd prsoriothe right being exercised 
or -o dcsigi?ats vasious transaction reia-ed pm»mtm% in the curisriSly pcsfs;rsd aiiibodmiant, them spec sftcat sons 
55 Include copy cove; f4B3 ; Fsss and incentives 1454. Time 1455. Access tsnd SecniiSy 1458 and Coatroi i4S7: iTach 
of these speciticatt&ns wis as described m greater detait beiow with respect to the iangeage grammar eisments. 

Ths usage right* langnags ss based or- the grairirnar described beiow A grammar © a convenient means lor 
ctefinsng valid seqneaee of symbols lore iangesigtj. indi^scrihlngthegrammtsittie noiatfon la ih ic] is ased to iadscste 
distinct choioes among aitsrnattves. in this example, a sea-ence can nave either an "a", hp- or it must inctade 
extsctty one of idem. The biaces { \ are. used to indsea-e optional hems, htote itiat bssjickois, bars and braces aro srsca 
to describe tne iringsage ei rrsags rigbis sentesnoes but oo not appear in acraai sentences in tbe language. 

in eon-rsst, csttrertthesss are pan ot the usage nghts iangyags. parehti-isses are nsed to grows items together in 
iists. The notation ix*} la used to indicate a varsadie iangth iist : ihat ;s ; a tist coniainrmg orsc or tnom items of type so 
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Ins notation (x)* * us«d to indicate a varfetbte number of lists containlno s. 

Keywords m the grarwssr srs vsords foliovsred by scions. Keywords are a common and very special ease s> Ihs 
iangs.:agfs They m& open sjsed to moscaie a single way®, typtestiy m identifier in many cases, the keyworo and the 
parameter are entirely optional When a keyword is gjwt, k often takes a single identifier as j?s vafos, in soms cases. 
* She keyword takes a Ik;; of Identifiers. 

in me usage fights language. Xma ss specified n ao norae miftctssiseconds «w bhttmstss) representation Tan© 
2am 8-«fet«s. s.q, POT for Pacific Dayifgfsi Tims, may aiso bs specified Dates are iepfessnied as year/ month/day 
;of YYyy/Mfvfy/DD;. Note ttsa fhssa time and dats ropftssemtiiioeis mm? specify moments m urns of urate of strms 
Money anSs are specified m semis of dollars. 
?c Ftnaliy. in the usage rights language, various "mlngs* will (\md so Interact wits saeb other Rx example, m ins-ancs 
oi a csage «ght may specify 8 back account a dtg&jJ liefest, etc.. Siech shsrsp ntssd So be IdcratiSed and am specified 
hsretn using ifis scttsx «-lD.* 

The Usage RigPis Siarnmaf is listed in its erstkety in Fpjrs 15 and is described tsatow. 

Grammar els-meet 1601 "Digital Work Right*: * {Rights*}" olefins ths digital wads np/its -as* set a* ftohts. Tee 
« set of hghis attached io a <*ghai work define now that diptiai wofk way fee transferrer, used, pertomieo or played A 
set of aghts will alias?; io the amirs digital work and in she case d compound dlgstai works- : each oi the components of 
the digstsi work. The usage nebSe of components of a dlgsfai snay be o'iSTersni 

Grammar dc-mem 1&0£ -Right . » {RigM-Cocsa JCopy-Coam) {Confrot-spee} {Tinse-Specf, {A»<m&-Sp*c} 
{F«e-Spec|}'' soomerates she coolers: of a fight. Each usage fight musr spiscity a !':gf;; ooPs. Easf; flgh; may aiso 
opttonaiiy spsoity conrfitions vvhict! w»& fe« sai;s-:;s<t hs?o; - s ths fi^bt <sm bs exsrcsssd. Thss« condstlons stre copy 
cotsm. eonirol. tiras, access and t«s condiilons. In ths currsntiy pralwsd smPociirnsc;. tor ibs opilonaf sfem^sts, ibs 
toiio^ing details appiy: copy cow. eqaais 1. m arae iimft on the use of ti'se right no access tests or a sesanty Sevei 
required fo use tne ripbt and co fse is ;oqc;:::'od. Those eon$?!Oos will eact > be dascribsd in grsasef P<5iali bsiow 

it ss irtiportsoi to note thas a digitai work may have multipis versioos o? a rigbt each iiaving the same right coos, 
Tije ftiuitipie vemion wee id piovlde al;e:T;etfvo eondhtens and sees iof sccaeeiiig the ciigiiaS work 

G:an : m:; ;! ;Pen : cnt 1 ;5i "Hight-Code : * R»nd«f-Co<te : Transit- Oor:is> \ ft:©.Mspa9««}««t-C«XJ3i Oer ivsiivs- 
Works- Cod« Oon%tim!k»)*Oode k disrsngaishes each of sh« specie rights smo a partisyiar fight type ■aiiboagh each 
rsght is idsoiiised by PiSEfaci fight ccOesi lit this way, the ^mvam pscvides a cafatog ot possible fights iha; can be 
afssotsatec: wm psrts o! ciiOitai vuotss. in -he foiiowing, ngtits are divided srstc- caiegorses for convatiioecc in cescfissng 
®> ibm, 

G:<;;cfi;ar ^tertwnt 1'i04 ' R«nder-C^ds : » ps*sy: ptayer: Fissyer-ip^ ■ »tinv {Printer: Printer-iD}]- a e st- 

spory ot fights aii invoiviao ;p® making of sphsnwal trarssitory. or non-dlosiai copi-ss oi the digiiai work. After use ths 
eopsse are erased. 

;rs * Piay A process of rendering or periorraing a dipjisf work on some pfocassor This leeiodes such things as piaysr -,q 
digkai fnoviss. pSayiog digital music, playing a video game ; atnmng a ccrrp^er p:ogram, or dlspfayiag a 
docaaieat on a osspiay: 

» Pfint To render the work fa -a rneolsm thai :s r;ot further pnsactsd by usage rights, such as pnntfng or> paper 

•*« © mmmt eiement 1 SOS "Tf8«*pfi^S-Cod» ; * fCopy f Ttsmiw i lorn {Remamfrsg-Rights- H&Ki-Sef-ot.Bight®}! 
liffexl-Copy-eSshts; tet-Set est FSS§hts)}° ilsts acaiegory of rights invoking the making of persistent, csaeie copies 
oi t:he digiiai weak on oiiist ieposilofles The opllonai Nsxr-Copy-Rigtss dets;irsif;e the rights on She work after ii is 
transported. If this is not specified, then tho r ights on ibe t ransporied copy are the same as on ths ■ original The optional 
Renmining-Righis specify the nghte thai mrnain w8i a dipifai work when ii is ioaned oai II this Is not speeiiied then 

*s the tJetaoH ie fet m fights am be sxersisea' when ii Is icanisd oct 

* Copy fvtake a new copy of a weak 

* Transier Moving a vsork from oce roposllofy fa anorher. 

* Loan Tempoiariiy loaning « copy ;o asiotner iispostoty fa a speeffiad peiiod o? ikne. 

;'C 

Gf ranimar mmM VX& Tils-^anagsmsnt-Cofis : » Ssetsaa {8ack-Ua-C-opy-Rsghts: Hs^t-Ssi -of Rights^! 
fimfum i DeMs \ Fokler f Oifsctesry {NsirisrHids-Looaf S Hids - Remote}{P®ri*;Hld«-Loe^ I Hftle-R^tsot®} 0 list* 
a cpicgoiY o! hgh:S invoivlng opcrahons br lite insfifjgernafii, sash as the makmg oi brsskcp copies to project the copy 
ownsr against eatastrophic sqcipmonf iailarO: 

fyifjoy soflv^s? e iicensos and also oopy; Igbt law give a copy own© the fight to maks backup copiss to protect aga inst 
catactfophic fasiafo cf equipment: Hovvavep the ioaking ©f- ijnconirollep backup copies Is inhersnily at odds with the 
stPlllty to control visage, slncs : an yncontroiios eseKup copy can so kspi apd then resiorsd oven afier the authored 
copy was sold! 
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The Flits mmyemrtt rights soabte the rrsaftirtganci restoring oi saekyp copses in a my tnat tespe-ets ?.issge ngnis, 
flmomg requtran'sents of oosh she copy am&t md the fights grsftfor and f©w&«a» omm Backup copses of work 
descriptions iincitsdirsp, usage rsgbts smi see dsSaj can be ssnt uncfer appropriate prefoeoi mi «ss§® rights soruroVio 
other document repositories of &uttfe;sni§y escatiiy. Further tights p&m organisation of digital works Into foidets 
which ihanisarves asotf salad as digital works and whose contents ttm/ be "hkfet©*! 1, ftam a patty soaking tods-ermine 
the ce-menis oi a repository. 

* SatKup To mm a oasksp copy of a oigsai wotk as proswto against media fates. 

* Rsatots To restore a eassyp copy of a digifai work. 
» Dsfete- To dstete- or ara.se a. copy ©t a digital work. 

* Poktes lb create and naros footers, and to mews iiies and loldors between So'dots. 

* Directory To h-de « folder or its contents . 

G -MuMi ISO? 'D^ivaffafe-Wofka-Cod* fSLxttaei ! Esufeed i £esit{Pfos*ss: ?»rocfes$-sD}) f^xf-Cepy- 
Bights : Next«Set-of Rights)" lists a category ot tights iftveteno. the use oi' a digital vvcstk to create new miU 

* Sxlnjct To fomovo a potftors oi a work, tor fho purposes of nreaisnc; a nm wot k. 

* Embed To mcfuoe a work so an existing wotK. 

» Edit To aster a digiiai work by copying. selecting and modify^ portions oi ari exsstirsg okgliaf wwk. 

Q»nsmf element 1SO6 x C©«fSg»ratfe«-Ce<te : * i«*tafi i mtnmw lists a category ot rights tor installing and 
ur-lnstailirig software on a repository dypfcally a randenag repository} This won id iypicaiiy occur tor ;he kBfaiiatlon ol 
a new type or piayer wsJfwn <he rendering reporslioty. 

* snstail: To insists am sol-war;; ot! a faposiiory 

* Ueitisiaii' To remove oxtstino. software tram a repository 

Gramas element i 50a 'Nexi-Set.of'Righss . « {{Add : Set- Of- Rights}] {{Delete: Ses-Of-Righss}} {{Replace: 
S^-Of-Slghl*)} {{K««p: S@i-Qf-Rigftis)}* ds«nes how rights are carried torvwsro' tor a copy of a o-gisai work, ft -he 
Noxt-Cooy-Rights Is no! specified, the ngnts fcr tns rtsxt coey are rhs same ss iho&e o? the currerit copy Otherwise, 
tha sot oi rights kx ;ne rvsxi copy can ba spooilirMi Versiorss ot tlghie after Ado: am susdm io tho carreaf se- ot ri^hta. 
P.>$sm aiier Oeiaio are cfsksed f ;om !he cusrent m oi nghts !fooV «od«s am iisisd -afier Oolate:. then ail versions 
oi ngrris w;trs tsrose cooles are doletod. Versions oS rights after Seplaco: subset rro ai: ver sKSfjs of rights of ihe same ;ype 
m iho current srsf of ric^i^ 

if Rsmainlng-Righis is not specsflsd. then there are m rights tor m orlginas after aif loan copies are loaned out. 
f! Rsfaasrssnq-Rfghts is specl!k;d : rhot; tha Koep: token car'i bo ussd to siinplify the «xp?«asion oi wf'sai tlghie io kaep 
foetrinci. A iist of rigi-if codes foiiowing keep means iha! ait of ihe vsrsfons oi those listed righis are kopi rn the rernaining 
copy. This spaclfloation can be ovetnddan by subseqyent Daiete: or Repiase: specriioarions. 

Copy Count Spactfmtiasi 

For various ttansaofsorss. s! rt ;ay be iiositabte so ptovtde some i«tft i»s to fhe aurabar oi "copirss" oi tr-a wotk wh;eh 
m^y n-e e^esCised simeiisneOLisiy tor the tight Pot esamp-e. si ro&y tie desirebie to iinid :ne ruimhe; of copies of a digiiai 
wotk thai rt ;ay be ioatied out ai « iime 1 or viawed ai a rsrne. 

Gramrmr oiernont i St 0 "Cs>py"Cc3«ft? : » (Copies: posiSsw-irstegef i 0 S tmiimUedf provides ;i coediiioe which 
ctefifscs ibo niiirsber oi "cqjses" oi e work saoiect to the rsght A copy coum can no 0. a i«sd number, or nnti-Tiiieo. The 
copy -ooiini Is associated with meti n$tn, as opposed to rhsse Pesng just a singla copy-count for the diktat work. T'tia 
Copy-Cosjni ior a rtghi ss cieorotoeniaci mcb %«m thai a tight is exnrcisad VVhan the Copy-Coaoi cqsiais .«sro. tho tight 
can m longer be exaioisocl. it the Copy-Coynt Is not specifiad : th* doiauit is orio. 

CmttvSSpemeisthii 

Rlphts and ices de-panci m ««fia«ri on rtphts prantsd by tins craator as wail as farther resirionons imposes by fetter 
Oisii-iharofs. Control speciticaiione dsa! with intsraoiionsi petwaan tne crsstors and mm distreutors govsrnlng the irn- 
postttoi? of further resarxrtojs as^d foes For oxaritpta. a distnbuiot or a digital wotk nsay not wits'st an ano eorteumet ot 
a dip:rai work to add tens or oihistwiss proftt by cofaitiorctaity axpteit ;nq the purchasoa digtttii wotit. 

G!?rr:(c*- oierno: : t -CoMfoi-Srws : * t'Controi: {R«sf«1ct«fei« i Uwestrtefsbl*} {Ur»Or?af§sM>f« i Charctrs- 
afefejf provides a condttion to specify the effect of lisaga tights aad tees of parents on ihe oxsrosso ot She rtgiif. A 
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tfigifai work is rsstr ictabte if higher isvsr d-stocks ean impose temm restrictions {time specif ications and access sp ec - 
ifsesiKSfis} on the tight, it « ^masttselabio « on farther resttrsetsoris ca« be imposed Tfte dsfst* sstirnc; 'is reisirictabie. 
A ss'uocteirgfissbls si no more ises cm se imposed on tne tsse of the fight, tt m ehargeahte sf mors fsss can b3 
imposed. Toe default is ehargeaeis. 

is Is often desiratsss to <mmqn a stem data ot specify soma derate as to when a fight may ba exercised. Grammar 
*ie<nen: ! 512 'Tm-iis-Spec : atff fred-irrtervsi i Stid^jj-intsrvat t S»*tsr-Um»J UnMi: £xf>itatiort«Oeter provictes tor 
f« specification ot turn conditions or; the exercise ot a rtghi Rights, may be granted lot a specked um Difeen! Kinds 
of time specifications ate appropriate sot different Kind* oi oahis. Soma nobis rttay be exercises:} during a faced and 
ptsdsssrmsnsd duration. Soma rights may bs exercised for sntervai that starts the first time that the fight « invoked 
by sows transactor!. Soros tights may bs exercised ca ate charged nccoidinq io scsrrse kind ot metered tarn which 
may bs spirt info separate mf ar vais For axampia, a r«gm" to view a picture Sot ae hour might be spiit «to six ten minute 
« viewrsgs Of four fitteon minute viewsngs or twenty three rnihoie viewings. 

The terms 'fiiTte' and t 'da;e c are u&sd synonymously io rslsr to a rnomertt in tirrsa Tows «t« eeverai kinds of tarns 
spec titca noes. Each specification represents soma limitation on fhs times over which she usage right appiies. The 
Expiration-Date specifies the moment st which the usage fight ends. For exampia, it the Expiration-Date is *Jm 1. 
1PS5." than the fight ends at the first mornertt of 1S§5. ff the Expiration-Date ts specified as 'forever*, inert the rights 
28 are interpreted as continuing mrmi and. it only aa ex^rmbrt daie is gtveo. \tm th« rajhs aart be sxaroisact as sstm 
as dosirsid &m the sxpiration dats. 

Csrarrsnisr eiotn&nl 1S13 T&sd-irttervs* :»F«m«: Start-Tims" » uaso' io dof:ns a pradetorfnlnad inJwva! te runs 
i'rom the start itrr?a to ihe axpitaison oata 

Graramar stem««t 15f4 "SiMtog^otsrvai ; * Interval Us«-0«ration s ts useo to cfsfios an irtderarmiasts (or 
ss "opeti"} sttsr; tltaa. t; sais Smits on a eoatteijoes paricxi oi tstaa ovtjr wtitef- the contenis am •socesmbte. The parted statis 
oa fts® first aaasss and snrfs aiiar the o'urastcn has passed or tss expimtm rdats is f«ach«cs. whichever coraas first 
Fot ejianipie. it the ngftt gives JO hours oi ccntoaori;.- accea&. the use -durst Ion woeid hogirs wfters the first seems was 
rnasifi and and to nouts te4sr. 

Grarea-sar aiaroaat 151S '5S8t«r-Tit«»: sTim«-Bamatsitng: tea-tsintag-Usr is :.tsedtodaf«ea 'mater titrse," that 
se is. a roeasore ot iho time $m ihe righi is atiuaiiy exerc&sd it ditiers irom the Sidieo-intervai spsc8ic%ttor> m jhat the 
ferns that tha aptsJ wcsH is « us© eaed t^ot aa eoniteiioee. For example: if tha rights gearaniae ihtm days of access, 
those dsye coyid bo epread oar over a monii-;. With this spectfscaisoh, the rights can be sxsreised untsi the aietsr ti me- 
ss axt-iausied ot ifce expitaitei; csa-e ts resetted, whichaver cmiss ftts!. 

;k Bsraatairtg-Uss; - Time-Unit 
Statt-Time: - Tirrie-Urit; 
Usa-Oyasiion: ~ Tiiris-iJni? 

Aii ot ins tame epecfestione incirsde iims-uhst specifications in their ytisreaie ihs-aetiation. 

Svewiiy dim md Ainh^rimtim SpmWmiim 

The present inysntiots provides tor vvstioue ascartiy tnechtsnfsroB to be iBfroducsd into a dssirtPiitior? or esa schetna. 
tir-i^r oioraao; itiio ; 'Accas^So«c -. = ({SC: S«ear}ty-Cta*s) fAuthoHjt«tto«- A'jtnor^sUon-SD'j {Otr»«»*Au- 
thortsa^kmt Aushorisatiors-tD*} {Tiefet: TtekeWOJ)' ptavidos a tneat5s for tss&fcsirjg accsss and tratismission. Ac- 
caas s par; ibaations car; sper;tfy a tequsred s«0«E!ly ciass for a reposttotv to «xerc:se a rtpnt ot a t aqtii-oo auifiaeitaitoe 
rest ihe; must be satisfied 

The keyword "SC:" ts ueob io specify a ri}i;;sniu;a security isvei for the (eposirortos snveived ir; ihe access, tt °BC; 
' is not spaaitiad. tha iovs*si seettnty ievai ts aoeaptabie. 

The opiionat "AyShorsssstioo;" kaywoi« is userd io spt^iiy t«qus'ecl authonxsiiorts oa tso ssroe tepostiory as the 
& vsotss. The options! ''OSher-Authorisation:'' keywesfd is-ttssd to spectiy isaesftKi aijthor<za!ions oa ths other repository 
trt the transaction. 

The oationai "Tiekstt* keyword saectftos ihe identity ot a ticket required for this irsnssteiion Airaneactiors tnvoivine 
dtgitsi ttcksis trsust loom- m apprcpeasa dtgitai ifcfaat aeoat woo tttsn 'punch* or otoetwisa vaiidaie the ttckei eoiota 
tha traosiaatKsri can proceed. Ticksas aro descfibep in greator dataii oaiow. 

to a t;&rsact:oo inveivitie a repasiioiv atrd a doeonssoi setvet, sortts esage rights may require thai tho repository 
havs a parnaetai aiiihoreration. ihat the server have some anihorit'aiiati. or ihat boin rapostSarioa have ipossibiy otf- 
fs:ren;:; autrwrasatttsrie. Ahihoffeations thtsrflssNes are digital works (hsrstnaftef rsfsrred to as an authortxation object; 
lim cm. da moved between repositories m the ssime reanrver as other digsiai works. Their copying end tmmfsrtmg m 
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subject so ttra same rights arid i@m «*§ other digits works. A repository is said to have atitfwitsatson if «sat suther- 
txsfson object is contained within ins repository 

In some cases, so auihofKatfon may be rsoiiired from a source other ihan the «oc«msr>i ssrvsr and repository. 
An ayihcwaiion object rstsrsncsd by an Authorisation-! D cart contain dlgstai address reformation to e§ usees to set tip 
•5 a CGf?i!Tiijn : icasbns fmh berwssn a repository arx! the auitnorixaftofl source. These am analogous so phone nymfcsrs. 
For such access tests, the cxsmnujrwssttion would need to be established a.nd svfhorU%(N^ obtainsc; asters jhs-r^it 
could bs exsicised. 

For one-lime nsags ngffls.. a varam on this schema is to nave a digital scW. Atickel ss prssen;sd to a digital jwfost 
agent, whose type is speeded on ths ticsst in the ssmpisst csss. 8 certified generic ticks; sg«r>.s. available on all 
?<5 repositories, is av&iiahie to 'punch* the ticket, in other cases, ihe ticket may contain addressing intormsiticn tot locating, 
a "special* siefcet agent Once a ticket has been peoensd, it cannot bs; used again to; ihe same kind c;f transaction 
(imlsss it is unpuncned or r«fr«ish3d in ;ne manner descrieed fesiow.) Punching includes marxinc- In© ticks) wan a 
timostamp oi she date and time it was used. Tickets ate digital works and car; da copied or tfansf ened between rapes- 
stones according to shear sjeaga tights. 
« In the cyrrsntty preferred smbodimsnt. a 'puncneo* tick©; tjecomss ♦uRounchee?" or 'TsSreshsa* when it is copied 
or extf aotsd. The Copy arid Extract operations save the dais and time as a p;opariy ot the digital ticks;, Whso a ticket 
ageoi is gwen a ticket, t can sirr-piy check whssihe; ths <5sg;;a : ! copy -msb mads attar Ihe last time thai it was pvnehsd. 
Oi course, the oigltai ticket must have ins copy or extract usage rights attached thereto. 

Trie eapiibiifiy -o tiopunch a liefest Is mportant tn she ioik>wsr;g cases: 

so 

* A digital work re circtnawd at few cost with & limitation that it can be used only ones 

* A dsafial work is circulated win a ticket ihs; car; be nsod once to give discounts on ps;chases oi ottsar works. 

* A digits! work $ eireaialee wish a tickei gncindeti in she- piimhaess pries and pocsibsy embedded m ths vvork} mat 
can be ysed for a tu&ns upgrade. 

ss 

in each ot these eases, it a paid copy is made ot tne oigittsi wort (inctuding tbs iicxst} she rsw owosr woafd expect 
to get a fresh f unpenchsd) beket whether the copy seiie? hsie usscl Ihs work or no? Irs contrast, loaning a work c; Simply 
translarrlng ti to artothi;:' reposilof y shosjfcs not. mtekm the isekat. 

se V#ag9 Fms «mf Ittcentfw* Spmitimthn 

Tne bsiiino. for esc oi a digital work ss lundan>enias to a cornn^erciai dlstrsbylson system, Grarnnw Siomsnt J51? 
Tee-Spee: :: {Sche-di:t8d-Discou?n| Fteg^lsr- Tae-Spe-c I Scheduied-F«e-Spc-c • IVtar kep-Spe-c ' p;ov;oas i^;r;pa 
ot options tor hiiisep tor the ass ot digital works. 
-5S A key Sea&fo ol tiiss approach is the dsvsiopmem ol low-ovorboad billing lor transactions tn posontraliy srnait 
amonnts. Tr;ns ft oecoj?ies ieasieie to coilact less of only a lew cents each lor shcusands ol tratisactlons 

The grammar ditferenSiatcs between eses w:hsre ine charge is per use trom those wnere it is metered by the time 
unit. Transactions car? aeopoif Sees tet His user gays lo; usk^g a digital work as wall as s'scanStVss paid by Ihs right 
graoiot lo nsafs lo induce them to use or distribute the ;3 : i«fial worit. 
•so The options; scneeulect dtscount rsfsrs to ths rest of mc lee spostftcatiort-discottfiisng it by a psresntage ov«r 
time. It It ts not specified, then there ss no scheduled discoiint. Regular lee specifications ana constant over time. 
Scheduled tss spsollloBtic-t ?s give a schadc la oi dates cvst which the las spselltcaito-ts change. MatHup specrlfcaiioi'ss 
are esed sn d-bioeksior adding a percentage- to the fees aiready being charged. 

Ccamrfia; liiariiant i 51? "Scheclefed-Discount: a (SchcsSiited-Osscoanf. (Tinse-Spec Perc*ntsg*}*y > A ^rt»5d- 
tilso -Discoertl ss a ssseotiaiiy it schedtiisd rnotiilier ol any otnat ?es specification lor this version of she ngnt ot -he 
digilal work lit does not rsfsc ro eliiidren or parent digital works or to oilier versions ot rights }. it ts a ftst oi parrs o! 
times and percentages The most recent tiins in the lis; thai has not yet passed at ths i:n;e of the transaction is ins 
one in stfsci The psreenttsne g:vas -he discotiot psreeofags for sxatspie. Ihe number 10 ralers lo a 10% d&eoum. 

:5;ar f ;;r : .; !; Pfe^rH i 51 'B^wfe^Fes-Spec : -({Fee; l intenPve. ) | ?V- Use-Spec I M«t*f«d-B«t««Sp«<> i S*«- 
55 P'rsco-Spoc i Cali For -Pric*. Spec ] fk*ln; Mon*y-Unli Per: Ti^e-3peo}ff»1ax: ^sfee»y■Unf^ Per: Tiirie-Spc-s; Tec Ac- 
ooynt-tO}* provides tor setrerai kinds ot tee specifications. 

Fees are paid by the oopy-owner/user to the revenoe-ownes II Fea: Is specified. Incenses are psxt by the revs-nee- 
owosrto the riser il incsjntive: ss specified. If the Msn: s^scitetscm Is giverr, ff-sen tr;ere iea minimum f-se jo ho charged 
per ilme-ssee ml tot bs ase. H the Msx: speclflcs-ion is given, then there is a maxtmem tee to 5>e enarged per tw»- 
-s specie; Us rise. When Fee: :s specified, Account-ID identities Ihe aocoun! lowhtch Shefeoistobepaid. When Incealive. 
is specified. Accoael: -iO ideniiliss the account from vAsdh ths fee is to be paid: 

Gramrriar element i &30 *Pw4)s*-$fm: ~ f*«r-U*«: Mos«y-tt«$r dstmss a simple foe to be paid svsry tans tbs 
tight rs exaivised, rfsgasdiess of how mnch tisne tine transaction takes. 
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Grammas" ;5:<»:r:<SnE 1521 WxC-f^-Sate-^XStC : « ffatftt&Oi: &tof»y-Urtit Pfcf Tirofi-SpSC' rf«:irj«S Si t':-fS!C::3Ci-:- ; :;C 

lea pad aeeoi-ding to how iersg the is saxerelsed. Thus : tb* time IS takes to cassis tns 'ttarssnefcofi determines 
ths lee. 

Grammar etemer;; i:;2i "Best-Prie-^Ssssc Bes-t-Prfeo: fVionsy-unit iMies. i\te«?y-««ir :s used it; spocily a 
•5 Sjesbprlce shat Is s&tmtmw when She account is sestied This specification ss fo accommodate specssst dsais, rebates, 
and prielno tnaS deparids on itftsrmstfert tnat is no! avaiiaisie So the repository. AS! tfce- spediteaticms can be sornBitisti 
w«h iksfceis or autftora&i&ns ths* eouici irastaofet. she consumer is a whoiesater or that he & a prsfefrsd eustomo: 
or mat tne setter m mrthcwets if some- v*ay. Tne amount of money in ths to: tietd is th«-f?»xSrfHsri amount, that the 
use will cos!. This is ths amount tnaS js tsntsiweiy debited iYcff? She eracssi server Hswsvsr, when She transactor js 
?<5 ussiniasaly raeoncifsd. any excess amouoi «sf! be resumed so ths consumer in a asperate transaction. 

iSrarfirofcf ei-jment loSO ^di-For-Pric^Spee::: Caii-For-Pricft* & similar to a "e^t-Pfioe-Sfsec- :n iha< it is 
intended to accomrnodgits eases where prices ars dynamic. & CaSi-For-Pri&e Spee requtm a csrnmurHCStlCK* wife a 
otssier to detetraloe the unce. This option cannot fee exercised ;t me isposiiofy cannot communicate wish a dealer at 
She time mi ths right is exercises' it ss bases on a secure transaction wheresy ths deeier names a ptim So «sttsrcis« 
« ths ughs sad passes along a deai certificate when is raterencsd or included «t the bitting process, 

Grammar gfemem 1 5!?4 'Schestaled'FTO-Opee: « {Ssshetiaie; {Tim«-$pec negater-Fee-Spsc,*?/ ss ceed io pro- 
vide a nandta* o- ctetes over which the See epecificaSlona o-iango. The ?es epocSicasso;-! wm >he reeani daie aot 
In she tviiyre is jn« ons 8mX is m oSSooi This is m$&t to bus mors gsnerai ihao ths sohsdslsci discoiiat. ft b mors 
geootaS, hacauea S ps'ovides a means So wy ths tee agieemsrii fo; oaoii tsraa ponod. 
28 ararormf sien-iosii t525 ''Marktip-Spe*: * ftterl&p: p^fesmags To: Aec^iss-si-SD"' is prcvsi-Ssd tor acting a per- 
csnsaosi to she fee* aimaoy ^ssrig charged. For sxampss, a s% markup iTisana thai a ?©s of 6% of cumulative fss so 
fas will he aMocaiecl So she clisirtbutof. A rrssrkrip spaoitieatsori cm be ap»i:ad 10 aii oi SSjb mm ktods offss spscificstsoos. 
a is ;ypicaliy used io a sheii provsdsci by a Gissribtaor is t^sre So tees as;K>oia:eo wish d- bio;;Si;s Shat a>-e parts of sno 
OLirrerts ci-btock. Ths mighi ba a cofwealsnt speciheasion Sor use in taxes, or in distributor ovarhsaci. 

ss 

REPOSiTOHyTBANSACTiaNS 

Vvhsr; a umt reqaee-s aecess So a digital wwk. »)s feposiiory v»B iniiiase vawm ttmmXxm. The corehinaiiao 
of traesaotioos 'mok&i wits <ispoed oa the specihcaiiosis assianeo sor a ijssge sight. Tnors ars shrso hasio -ypss ot 
-S>? s:-ansactit>ns. Session fnitiaiion 'iVsasacttoris. Financial Transactions and Usage Transaclions. Gehoraliy. sosssor; im- 
tsasiori :raosac!tior3« are ir>iha;eo tires to oesabiish a vaiio session ^Vhen a vaisS sessioss ss esiabisshed, iivsas-ictions 
eoffsaporiding so she varsoss usa^e rights are invoked. Fsnaiiy. rsqussi specie transactions are pssrSonTtad. 

TtBasiisiiests occur bameea Jwo fapcKiiorseB {on® aeSiag ae a servar}, betwser; a repository arid a docurrieoS piny- 
beets piasforfri tor sssfXiSmo, or Viewing), batwsan a repository and a oreoiS sssver or boivwsen a repository and an 
authorssriion server. When transactions occur between nxae Shasi one repository, it is assumed shat share n a reirahio 
con-ifnnn station ohannei bet wear? tt'te rs>posito;ses For exatnpia. shiscouid be a TCP/iP chanosi a any other comsTier-- 
oiaiiy svaslabie channoi Shat has oaiii-in capahiSiiiss tor deisoting and correcting transmission errors. However, r? ts no: 
asasjssngfj that th« eoinrniaiieaaon ehan;5e: is secyio. Pfovisioriis tot security arid privacy arc pan of the requirements 
lor spetiiyiog and irapiernentiog repositories and thus tetit» f)««ai fof vailoaa SresnsBetieois. 

jo 

Transscnofss require that there- be sorno oosTirnonication fjetwsan repositories. Contmes-iisation between reposi- 
totses esncors in units termsd as sTiessagss Because the oosTit-^irsleaiion ili?e ia assumed to he ufrsecuie. ali cofntriu- 
fitnahons » ieposifoitas thai are above the iowost secertfy class are eneryptod utilising a pishlk: key encryption 
technique Public key encryption is a wsit known technique in ;pe sncrypttor! arts Ths term key retsrs to a numeric 
code Shat is used w'iih encryption and dae-yption aSgosithms. Kays come in pairs, where 'wtimg keys'' ara used so 
encrypt data and 'chscksog ksya' : arc ttssci to daciypt data Both writing ana cheeking keys may be public or private. 
Public ivsys are fshose that are distributed tooths. Private keys a;'c masnsasnud in centsdance. 
vC Ksy (Bssnagarosnt and secarrty is lnstf!.:rasmal in the eijccass ot a pabiic key encryption system, in the currently 

prsisrrso erasodieien;. one or more master repositories t-naintaln tne ksys and croate the Identification certificates 
used by She repositories. 

When a sending repository transmits a message to a receiving reposiSory. She sending repository encrypts at! ol 
iSadaSa using the public writing ksy of the receiving repository: 'fbe ssadlng repository Ins iades m.mtm. ihenarnaol 
sa the receiviitg roposiSory : a sessior; Idertiilier sech as a nonce {described ttekm), and a message counter in each uses- 
sage 

In this way, the communication can onty ee read Ilea h!o,h prosabiiitys by tno receivifig .repository, which holris tho 
private etwektrig key t« decryption. Tbe.ae»;sary data ue used to guard against various ;eplay atisscke So secuilly. It 
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emsages eve? mm with the wrong counter or an efcs mem, this rspoeaones can s-ssyms thai someone is intedsriag 
wish cofsmts{5©ato5 and the transaction terminated. 

The respective pubis:- keys for the repositories to fee used for encryption are osteins©" sn the registration iransactson 
described below 

s 

Sesrsfoe inXtetion ?>ame,-aci"wns 

A usage transaction is carried <syf « a session befevesn repositories. Per ussge transactions invoking more man 
one repository, or tor ttrtanctst transactions between & reposiiory and a cr sd-i server, a registration transaction is par- 
ts termed. A second transaction termed 3 tegjo trsrtsacison, may aiso be needed ;o initiate she session. The goaf oi the 
registration transaction is so establish e secers cbannei between fwo teposiior ies who know each others sdsokhos. As 
it is assumes the; the corrsrttmicatfon ehannef bsiwoen the repositories is refeafefe &ut no! secure., there ss a nsis that 
st norwepoeitojy roay reim* the pioiocai in order to gain siiagiiimate access to a f epository 

The registration transaction between two repositories ts described with respect to Figures IS ami t?. Tne sieps 
« described are from the psrspeeiivs ot a n-eposiion'-l^gistering «& identity with a "repository -2'. The registration must 
be frytnmetrtcai so the same set. ef steps wi be f epsaied for repository-^ regotsnng sta identity wish iocosrtoty . 
Reiernng So F:guf© 16. reposnofy-l first generates m eneiypted registration identifier step r5u" and then generates 
a registration me&sage. stsp 1602. A registration message is comprised of &n identifier of a master repository 'he 
sdsnbtiesiion cehsfccata tor the raposstery-1 and an encrypted random registration identifier. The tdanhiscaiion certificate 
ts encrypted by ;ne master reposriory in its prwats key and attests to She fact thai the repository {bare repository -i ) ts 
a bans; fids repository. The identification cerirfteate aiso comains a peciic key far iha raposiiary. tba repository sesanty 
level and a brrsastafap findicaisng a iitno a'toi' wnich the csrt^icste is no iof?g-ss valid) The raajsttattoi; :dentrfie; ts a 
mtttmt gensfsieo by tno reposttoty Sot ibis fagistraitoi; Tba ragisiration id$n;iiiar is ijatqiip !o ihs sesisian and ts, 
anttypiao' repository-Vs prwate kay. Ths rsgisirsiiion sfentHiSf * ased io improve seowlsy of suihonlication by de- 
tsotrng certatn kinds oi exwsmufiksstKSfMS based aittsoks. Repository-") shesn iraassrisSa she fngtsiiaitai? message so repos- 
itory -2. stap tSOS. 

Upon rsceivirsg The m^jsteior* message. rapost50fy-2 dsierniihas if ii has fhs needad anbiie key lor the mas?sr 
rtjpository sitjp 1 604. ii iogos:toty-2 does ncsi havs Xtm needed pubiic key to rfectypt she idensi!ieat:ot) csnitole. tJis 
fpgisiraticn iransannoe iofminaias in an ertor siep 1SV&. 

m Ass^m^g ;hea r&-pos«ory-2 hm ihe aroasr pebiic kay tf>a ideat^cesian csit:f««is « daorypied. step ;605 Reaos- 
savas ;hs socrypssc! repistraiion speiviatei: mp fS0B ; and tsxiraats :hs repository sdsfiiinsf. step tS07. The 
exireciaa tepasiiory idertiiiier is chasked against & "hotHsr' pi con-tarornised Octatrier;; rapoaitoriea. step 1508 in Efts 
cirrtenity prafetipd emboc^rmni, each r«positoiy wtii contain "fiotlfsSs" d comptoj'fiiaad topossiotias. if tha rnpasi-ory 
ss on the "hotiist', tba registtatioe traivsaciion terminates sn an orros pa; step >SiS. Repo^sonss aan no tmsmd from 
the baiiist when ihairesrtsticasss expire, so tnat ffts iist does mi nasd so grow wsihont aoend. Aiso. ay keeping a short 
iisi o: twittsi neriifiniites tfsai rt iias previonsiy teceived- a repository -can swarf sbs work of actuaiiy gang tnrGugti ihe 
sisk Thesa iisis wouid be eiiarypiad by a master faposiiory A minor vanaitan an iftp approach ia improva ettiaiancy 
wotiid have ihe repositories firs; exchange ii&is ot names of iioiiisi csdiiscaies. iiilimaieiy exchanging eniy shoes iisis 
snai ih«y had not prtsviousiy iesoiveo. The "botiists" ssfo rnainiainecl anri disttinuied by Maa-ar reetssitofi^s. 

•so Mats iftai ;atbar ;nae iarminaiing sn error tba transaction could requesting aaofnof rogtsfraiian massage be son! 

based 00 an identification certiiicaia created by artcthsr rnastar repository Tias may be recsaied anfti « saftsfaeiory 
ideniiii£:atior; cortiiinaie is foand. or it is dsiortninsd tba! tt-jst canno! be ostabiishsd. 

Ass>em:ng thai the reposiioty is nal wi ihe noiiisi. she repository ideniifioaitcn neade io be veefted ia other wards. 
reposiiory-2 needs io vaisdata that ins repository on the other end » t eatiy teposstoty -1 . This ts ierrnsd perfomsance 

*s issitng msi ts parformed tn order to avotd invalid access so tne reposiioty v« a counterfeit repository repieyir^ a re- 
aordiagoia pfiorsassiort iniiiation aoi^ean fsposiiory-'i and rspostfory-S. PpPormaecatPsiirig ia iaitiaiedby repository- 
2 gerieraiing e per'aiTrtenes massage, siep 1609. The parfcrrtiaase etessage oaasssts o! a nonce : the names ot tfts 
ffispactrve repositories, iba !sme and fbe fsgtsttatioft identifier reeesved trms repoaitary-1. A nonce ss a ganemtsd 
tnessagp based on so;ns raodess aixt vartabie information {e.g. the itme or the >e rape rat ute. ■ Tea nonets rs used to 
che«!* whether ioposi!.ofy-1 can aciiiMy cxhibi; noaec) encrypting of a masstige using the prr^jie keys ii niaircs to 
have, on a message that it has never seaa befor a.. The performance me&sage ts snctypiad using the pubiie key spectftad 
sn the tegisirsiion message of reposiiory-t , The performance mes-sage ;s fransmifted to rspostiory-t , stsp 1 61 0, where 
ft ts decrypiod by rs^)cssiiory-1 nsitrg ris prwaia key stsp 1611 . Reposittory- f then checks io make sure thai the names 
of iba two repositories are correct, siep 161 2. that tne itms te socersia. sias 1613 and snat the registration identifier 

as csjrfesponds the one :t ssnt. step T814 ft any « mess tests fails; fees ttansaoiiori :s feftinnated par step 181-6. 
Assuming that, the testa are passed, repository-* fransmits tne nonce to r epositof y-2 :n tba cfoar. siep 1 S ; 5. Repository- 
£ fpon eompar se tba receives nonce to the ortginai nones: step r6i ? if ibay am not idsef icai . tba regtsiraitan transaction 
ienainaiss « an Si -ror per step 1818. if they era she same, the registration transaction has seocessfoiiy oompieted 
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At mis point. assuteirv;f shst the tfamactta has not jsrminatsd. the t0fxM(xm exchange messages containing 
session keys So fe» used m siif eojroiunicaitoris Sutisg the sassier? and rsynohronoa jhett clocks. Figure 1 ? litestfaies 
the session iniOfrmtion exchsn$e and ciccs synchrooffiaiion steps tso^srj tram in© perspective of repository-; ) Re- 
tetriug so Figure 17. repository-! creates a session key past, step 570!, A iam key ss kepi swase and •& used by 
a iesosilory-d to encrypt rrissssstgss. The second key is a pubiK key used by repository-? to decrypt messages. The 
s«conci sey is encrypted using the peakc key of repository -2. step 1702 and is son! to rsposstory-g. step 1703. Upon 
receipS. neposrt.ory-2 daeiypts the second key step 1704, The second key is uasti to decrypt messages in subsequent 
ctawmmBaJions. When «»s repository nm completed {his s;ep, fhsy ere both convinced that the other repository « 
bona tide arsd mat they em @ommuei<eattR§ with the angina!. Each repository nas given the other a key so m usees kj 
?v decrypting further comrriuniestioos during the session. Since that key is ksetf srarwmtisd m the pubsc key of ins re- 
ceiving repostoy oniy si will be able So decrypt tise key which is used to s&aypt snbsoqusnt messages 

Af-or the session information is exshanosci. She repositories must synchronise atcttr clocks. Ciecsk synchronisation 
ss usee' by She repositories io ssiabitsh m agreed upon urns bass for me ttnartcssi reec-ids of fhsii tnwwi transactions. 
Referring Pack to RgMfrm, rerxssitosy-c fat tales clock syrwhrorfelsori by peuerating a tmm stamp exchange messape 
« step 1705. ana tiansn-nie r io ieeository-i step 1 706. Upori receipt. <eeosiioiy-i gerserases sis ovm lime stamp mes- 
sage, step t?0? and transmits rt Hack So repositosy-t: stop 1 70S. Ropos»toiy-2 notes the current time, siep t?0& and 
Stores ;he tiros receives tttxn r sposkon/ • s , step 1710. The currant time ss compared to the time receives:: from repository- 
3 . step 1711 The Oiitsrersco ;s thsn checked to see it ii exceeds a prsdstsrmfned toi««atic« (s.g. one rrssnntsj. step 
1 712. ii ;t ctoos. ropostoy-2 iercrssnaies the treiisaeisori es this r«ay irsdCtire 'tempemg wuh the repnsirory step 1 ?1S. 
28 si n« :'&pos(toiy-2 computes sioadriJStsdSii-nedsiia. step t7s4. The »d|«st«d tims «8fca (s me- cMerer*^ Q&mm 
clock trme os rspo&itc5ry-2 and the average of the times from fepossory-t and :psposiiCfy-2. 

lb achieve greater aoccraey. r epositosy-J: can request jhs lime agssn np -o a tacsd numbs; of times {s:e, ftve times}, 
repeat mo acwk syncrsrorsi^aSiorvsteps. <jr;0 average ihs rostjirs. 

A secondsessionin:t:aPon transaction !s:sLogiiv::«vi!:0iion The Ic^ifansfedfoT! is imsi soch©ck$!-$eavrh®f<;tc(jy 
ct a user reonesssng a transaeiion. A Looin iriins-sctsors ss pa risen la riy prudrsni iorttje aofhorwaissrs erf llnanelai tnsnsae- 
tions iPat m ss cfsarpoo !o a credit server. The Login iransaeSicr: involves an interaction hetvifeen she cser at a trser 
iftt«hscs and. The credis ssrvsr associated wait a reposkory The lntonrsatio»i exchanged here is a iogsn ssnno. syppsted 
by the ieposkory/eredi! sosves so identify kiseit to ihs sses. and a Persssnai iderniiicaSiQe Numbec (Pi hi} provided by the 
user to iceniiiy nirnssii fo the creds mw&t: in the event ?}>?•.; tne nsor :« accessing a credit seiver on ?• reposiiory diiierent 
sc from the one on which she user interlace ies;dss exchange of she mfonnatior: would he encivpiecf using ths pchiio and 
pdv-Se heys oi the respective rejxiSitories, 

BsMmg Tfansmt&ns 

Biiiing Transacttorss arc concerned with monetary ifsnsactions with a credit server Bteg T ransacsione are caused 
oik when atf osisef mndkions are satisiied and a usego fee is required for glassing the rsqussr. For the moss parr, biiisng 
transections ere weii «orjefs?ooc5 in 'he slate of she ert Tftese iiensactsons arc Between a reposifory anp e crepit seiver. 
oi bsswean a ciedil server a;5d a biting oieafingtroijss. 3r:efiy. the segsired transacslone inolcds Ihs ioiiowmg. 

•so * Recist-isiion and LOGIN Ss'&nsacSions by which the repository and user establish inetr pona fides io a credit seiver: 
These Siansackcios woukj bs entiteiy :riiOir:a! in cases A'hem she repository and essdi! s&rver are irTipientsnled as 
a single system 

* Registration and lOGifv imrisactsons. by wrtrcn a credit server estat>i:sbes its con a tides tea billing clearinghouse 

* Ars Assio/Hes fransisietioi; io assipn a eharpe. The IniomiaSlon in tisis iraosacflon wouid seclude a transaction iden- 
■ra titter, the identities ot ihe repositories in the iransactseiv ssnp a list ef charges horn ihe pans of the akgsta! vw>«.. 3 

there has Peon any unusual eveot m the transaction ssjch as an interrupttort ot comnsunicatioos. thas mfomtattort 
is snciuded as vssii. 

* A Segin-eharges traosaefson io asssgn a charge. This tmnsaeison •& much the same ss an assign-lee transaction 
except fhas rt rs used tor metei^d use. it includes tise sanse mtorrfsafiori as she 3ss:gn-?«e transaosson as mil as 

vC ihe csage tee rnformiiiioo. Tne c redit-sefver is ihen rsBpofisibie for running a stock. 

* An End-charpes trstneaetion so end a charge for msterad use. fin a vacation on shss approach, the repositories 
wociP exchange periodic charge information tot eaets biook o> wm.) 

* A repoil:-r:tiiirges iransaction netweesi a persorrai credit server and a rsiting ciearsnghousi?. This transaction ss 
invoked at feast ones per pitting period, is is cscd to gsss asong intormstion aoots! charges. On debrt and credit 

sa caicis. fhss iiansaetiors wouki aiso be aserj lo ispdate hafance intorniafior; and credit itmits rsis rseeded. 

Ali bitting transactions arc given a transaction iD and ere rspo-ned so the crept; severs by both she server arse the 
client this reduces possihie Joss ot ostkng iolonnstion it one oi she parties to a iisnsaeta? loses a hanking card and 
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provides a cheek against tampers with the system. 
limga Transactions 

•s After the session initiation iransactfora have bom completed, she usage rogues! may fhtm be processed. To sim- 

pitty She description of m* steps canted out *i processing a «sa$e request, the term rasp.sQS1«f ;s used t» refer fo a 
repository m the requestor reeds which >s trfiitaimg a request, arsd She seas -server is nsed so refer to a i^epository srs the 
server mode and mxfo contains the desired digital wars. In raarsy cases sweh as requests to prais or vtew a work. the 
requestO! and server fray be the same levies and the transactions dessf ;bed in the foiiowmg vveufp be entirety infernal 
?e in such Instances, osrtairi transaction steps, such as the registration transactor!, nesd not oe perfcrwad. 

There are some cortsrriots s!eps lhas are pari of the semantics of ail ot the esage ngh!s transaohons. These maps 
are referred to as she common tmmacDort sSeps. There are iv»*s sets - tha 'oponmi? steps and me 'ctosiog" steps, 
for s:rr;ptscs!y. fhsss ars3 ilsied here rsftter thart f sp-eatirtg them so she descnpiions oS aii of the usage fights trarssactsoris. 
Tr&qsactroos can refer so a par; ot a sigrtai w a complete digital work, or a Digital w&dt containing other dsgitai 
« wofK& Aiihough not described rr. detasS herein, a transaction m&y sven refer to a folder comprised of a plurality of digital 
\eosks. The ism; %ork" is srsedto rsfer jo what ever portion or se; of digital works is being accessed. 

Many of the sfeps here irtvoive ctagmuriffio. * csrs«»r> concisions are satisfied. Fieeail Iba; each esago firjht may 
havs <sm or more cofsc'ilsofss which mug; Ps satisfied bsfors Ins «gbt can fee exercised Digiiai works havs pafis aad 
parts have paria. DiSferant parts tan teve different «^t» and taos Thus, it isfiecsssary iovciiiy !hm ihs r^qsjffgfWsis 
28 ars m« for ALL of ths pasts thst arc invoivc-c; m » tfansacho^ For brassy, mm ciersncc is macte io checksna wnathar 
?he fights sx<st and conditsorvs to; e(ss«c*itig ars sai^iied it s m«s$ ttet ai! iuch checking lakes- piace for each ot ihs 
reteimn parts d the wotk. 

F(9«f« 18 sliasf «t!0S the iatei jxkxotw op«o^ ciostr5§ stsps for a uaasactico. A) this posvt « is-assumecsinat 
;egisi;«!ioc hae occur r^cs and snai a v iiuiie<3" se&&ios! ;& in praes G>3as;ar saste a-e te&is on usago rghis associated 
vsrth itjc foidor coniasningtho work or' sons; oonismng foicser htgher sn the^ie syaienr t-irsi'archy These iasfs cofreapoi-sd 
\o rsq^ifesTionts imposed ors the vsofs as a coaseqasncs of as o«ing on she particufar rapository; as opposed to beiocj 
aftached to the work r?seif. Reterripg to Fsgum IB. prior to initisdincj a ysaas imnsactron. tho requsstst performs any 
pa;5erai tasss tt-ai are required imom t\s riph; assocsared wkh the trarisactjw casi be exercised, siap, 1801 . For' ax- 
imp®, :nsia!!. untn^itt and delete nghts may be iryipierns-nrea to require «sat a requester have an aaihoraahoii cert:? - 

se <cats eetofo the r»grit can da exe; cised Another e^ampfe is she raqjif sreani that a di.-}i;a; Ltks? p e p ( § SS nt arsd punched 
before a drpiiai wesk may be copied to a tsquestet. \i any ot me generai taste trjii. she fransact-en :s not tnihaiad. step, 
1 &02 Assyswj tha- sor.h required tests arc passed, ypon receiving the osagf? reqaest, the server qeneretes e i:ar;s- 
achof; sdarjistier tha! fs used in records or rapohsoi iha trrjneaarion, sfep tSOS The server then checks wsseiher she 
digriaS work has Paen granted tha right corresponding to me requested trscsaetion. step 1804 if the dipi-ai work has 

;k not been granted the nght corresponding to tha reqyeat, the transaction ternrisnatos. step ;80S. If she digits) work has 
deer? gnssnseci the requested nghr, the server then determines it she various canoMxms for exercsssrsg trie nghr are 
satsiied. 'i'irna based conditions are examined, step 1806, "those conditions sre checked oy examining the t;me spec- 
itication tor the tha version of ihs s :gh; it any oi the eoediitc-os are rrot satisfied, the transection ter mirtatss per step 1 805 
Asseming ttsaf the ttrr* haseci cof;;titior;;i are sxifsfiert she server cheeks eecersy and access conditions, step 

•so 1807. Srich seenfity and access conditions are satisfies it 1 > the requester is at tha speeitted socarsty ciass. or a higher 
secuniy class 2) the server satisfies any specified «i-itbo;i,reiion test arid 3) the fspeester satisfies any sesciiied ae- 
thotbest«R testa and has any reqelsed dlqifattKkets. if arjy of the sorsdiitorss are oof ssiiis!ir;d ; ttieiransaatientarnssrietea 
per step 1805. 

AssumioQ thai the seeertiy and access conditions are aii satisfied ;he server checks the copy eoun; errnditfor;, 
step tS08. if trie copy coum eqiais ^sro, fften tne frrinarsction omwot he oompSeierf and tha transaction tari-ninrstea per 
step f80§ 

Assuratng tt!8t the copy coent does rsof equa! zero, the server cheeks if the copies In ess for 'the requested nghf 
is greater then or epijat to any copy conn! for the requested righ; (or teft&mtti Ptirtst; step 180S. it the eoptes in nm is 
greater than or equal ts the copy coeof. this tridicaies that esaga rtgitte for the version of the transaction have bseo 

se exhai-iSiOd. Accordiegiy. th» server terminates the srarasacstson. step tfiOS. i'lhe copy conn! is iess than foe copies in 
ess for the transaction the transaction can continue, and the copies in ess would be incremented »v the nemoer ot 
digitai works requested m the fraosactiOit. siap 181Q. 

The server tfjen ctr-scks if this digital work has a ''Loisn 11 access rsgnt. step fStt . The "t.oan" access right is a specie! 
case sicca roaiainlng rights may bo present even ihough all copses are -caned out if the digital work has the "Loan" 

sa access right, a check is made k> see sf ell copies have been loaned out. step 18.52. The number of copies thai coyid 
be loaned re the sum of the Gopy--Coon1s for aii of the versions of iha loan right of the digiiai work. For a composite 
work, the relevant figure ts the minimal such sect of each ot the components ot the eomposlt® work, if aii copies have 
Peer? ioaned out, the rerrrafnleg rights aredefeiruirieo, step 1 81 3 The rarna-iniog-rigbis ssdeierrnsned -rent the remaining 
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rights specifications ttam $h§ versions of the Lean notii. it jhsm ss or**? cro vmmn of the Loan right, then sn« deter - 
fswstlfoft ss simpie. The twmm^ fights ers -ha ones specteS m that version of she uj&rt n#a. or rwts it RerraKtmg- 
Rtghts: is not spsc^ed. 8 shsra sr® srsuittpts versions of toe Loan right and sii copies of 38 ot ins versions sr® icaned 
out. then the fs«tak-!tng nghts is safcsrt as the minimum set {wmm&toii} of rerr-asntrta. rights across ait of the versions 
* oi -me ioen nghi. The server then spermines if ths requested right is in tne set o! remaining rights, step 1-814. if She 
requesters right ss not in th«s sss of remaining rights. she server terminates 1:he transaction, stejj 1805. 

it Losirs is not a u&ag© right lor the- dipiiaf work o; if aii copies tw not been iosaosd out or the rspessred sight is in 
m mf of remaining, finite, foe conditions for the «gW «sr« aw cheeKaei, ssep tstg. This wsii miste vancmtsrtanaat 
transactions between th® repository ano associates credit server Funher. any m&tsrmg ot usage ot a feigitai work mil 
?<5 commence, ii any financial; itmt&cvm iaife, 5he transaction ierrninsiss per step 1805. 

8 should bo noted thai ihe order in which -ho conditions ms cheeked need not mm ins order o? sSeps 1 S08-d8i 5. 

At this post*, hgh; specific steps m& now pmmma and ar* represented hers as step f 818 The ngns specific 
stsps ate described in grassier defaii heiow 

The common closing transaction steps are now parioimsp Eaen of the ciostog transaction steps st* perrones-d 
« fey ins server after a sijceessfiii compiehon or a transaction. Referring back to Figure ;g. ths copies in nse vaies for 
the requested right is sSscwrssntsd tiy the number of copies involved m she srsosaetion : srep 181 7, tel. if the right 
neer a metered esage see specification, the server subtracts the eiapseeitirne from the Mernaining-Uee -Tfms associated 
with the pgrs for every part inwoivsd m the iransaettoo. ssap 'SSfS. Fsnaiiy. ii there are toe spacaicsstons associateo' 
vs::th 5ho right, the sosver Mm® SM-&m^ financial f rensaeiion io cooitrre biij^ stop 1819. 

a; 

Tmfismi ss ton protocof 

M rmportam utm fo consider is fhs f i'Siisreission of the o;pai wcwk (rem the ssrv<sr fo ;ho r«q««s$sr. Tiio ums- 
mmm protocol ciesoriood herein refsre to events occurring after a vaiid session has feesn crsaisd. The smnsmtssson 
preto;:oi messl henoie fhe rsise ot dierupiioj's in the eoranirsraseiicos beiweor? the repositories, if is eesurfjeri ths! inter- 
ference snch as iojsctmg nosso on ;ne oomrrrunicstion channei can fee peie-cteo by the inieoriiy checks -c p.. parity, 
cheeksern. etc } thar are buiir smo fhs transport protocol and ars not dsseassed rrs dstaii herein. 

The ■jsiderhffng pesai in the trar jsmissrart proiocoi is fo preciude eertein inffn; e mobas, sueii as inaiisious or aeeiPcniai 
infoffcrencs on :no cornmcnicatsons ehannoi. Suppose, for exarapio. inat a escr pniis a card with fhe oredsf senrpr at 
se a specific *tm nsar ine end of a transaction, item shos id not fee a v«»teratste time at whioh "paffirsg the card" causes 
the rseositones to fail fo coi:reofiy iscooiavi fos'the number ot copm of mo s¥Ofir fhas have tsoen ereafeci. Rcshttco. there 
shouid fee no time at wfesch a party can brsak a connscfion as ss means to avoid paymsni after yssng a digitai work.. 

f! 3 transaction ss interrupted {ana tesieV bofh reposiiories roeiore she diorta; works ar?d aseonnti; iotfieir stasc p:ior 
to sno iaiiyrc. mociuio records of she faiiore tisei;. 

Fsgrsrs 19 is a stats diagram showing steps in ;ne process of transmitting .inienriission durinp a transaction. Each 
box represents a state of a rspostoy sn sitter the ss;ver irsode {above she centrei dotted Sine 1 901 ) or in the requester 
mods i.ceiovv ths dotisd iine 1 SOI} Soiiri arrows stand tor f ransitions bshvesn states Dashed arrows siand tr> n- : sscags 
coi!'!»Tssrsics!tio:3S befvsosi^ the reposstones. A dashed message ai row poirjisng lo a soisd t;ar;si;ion arrow- >s :nterri;sisd 
as is^eaitsng thai the transition tekos piar;e mm ttts message is r«ceiys«. tlniaeetsif iiar-isision arrows tase ptoco 
•so ynccndiiioriaiiy Other iahsis on stais tramttfon srrows desenhe sendistone inat trigger the transition. 

Befsrrinp now ro Fsgurs IS?, the server ss inifiaiiy in a state 1902 where a new tswisaciion is initiated via start 
message t§C53 This message snoinoios trensaofson infontiatior; inciuPsng a Sra-isaction iPentiiier and a count of -he 
foiocks ot data to be transferred Ths requester, irmiaiiy m a wait state t904 then enters a da:a wast state i905. 

The servs; snters a date iisrssairi stets 1&08 and fraiismits a biosk of data 1807 end then entei's a wait to; 
snowiedgoment s!atf: i 90S. As the Pata ts received, fhe requester enters 3 ciasa receive stats i SQS end wnen the dirta 
fetoctss are ecrnpieteiy received ii enters an acknovyiedgerneni state t S f 0 and transmits an Ackncwiedgement n-isssags 
1811 to ths server 

if there ere mors btedes to send, the sssverwMs nnf ii receiving ao AcknowiedgeaMni fnessago 'frojvi thc reqn&sicr 
When m Aoknowiedgeiiiett; rrisssa^e is rscsived it sends the next biock to the reqeester snd again vrerts for ackiiows- 
5e edgerneni. The repnesier aiso imposts she same cycle ot states. 

it the server detects a cor«m:.in;caiicsn& taiiurs oefors ssnditie the isst feiook. it enters a cancstiation state tSsS 
vvhersin the tr&rssactson « canoeiied. SiiTKiatiy, if the repuester detects a eomrriunicsiitons fsiiyrs before receiving the 
feast biock it enters a esneeiiahon state- 1 SI 3. 

it tnore are no mors feioctes to send, the server commas iothe tiransaction and waits tor the ffnai Ackoowfiedgement 
•ss (0 state 1 St 4. if itiere :s a eorn?nvnscetiOi>s taiiurs befors she server receives ttte tel Actaoisiiedgeinsii! rrssssage. it 
stiii eomrnks to she transection but ieoiijciesa repor; aho-if ihe even- so its credit server in stain 1 815. This report serves 
two purposes, it wifi neip ie08mi2« any ciair^s ay a tiser oi having seen bsitsd for receiving dirjiia; works ihat were not 
covspieteiy i^ceived. Aiso ii hefps fo iderrtify repositories and communicaiions Noes thei hwe suspicious patterns of 
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use w6 imsfrupaon. Ths server shso enisrs its completion state 1918. 

On She requester sda i»heo ®w» ar* no blocks to f«c«ivs. the retGuastsr commits soths transaction n mm 
1-81 7 if ihe recmest&r defects «-sorom«racaticns tanars si this siste. at reports She lasers 10 its credit server <n stsS3 
1 & s 8. but st::i eommris loth© irBinsaetion. When a has corT?rriitteo\ a sends m acknowledgement message to the server 
* The sewer then mum its eonipiekon $m® 519. 

The kssy property is thai both the ■ server arcf tti« requester csocei a f ransseiion if is irtiemtpfted before «» of the 
daia Pioeks m> delivered, and commas to- ft f? aii of ins data biosks have been dasiverad- 

Taere is a possibility )h*a the server wiii have sen? aii erf iiis data stocks (and commftttaS) but tn* requester wsii aot 
hsve received ai: of them and wrff cancel the transsetiort in this case, coin repositories wtt prasumabiy dsiect s earn- 
?s rnaaicaiien& Mum and report it to their credit serves This ease w$ proPsbty fee rare sines k depends on vary precise 
liming c* ths comrmaBCiSitKirfS tttaure. The only conssqwense wsii be- that the user si the requester r«^sosstofy my want 
to request a rstand from Erie credit sen-aces - and the csss for that rettttid wii be csosumsnted try reports fey fcetft 
repositories. 

To prevent ioss of eia;a, the server shonid not dsiete any transferred diqitai wwst antii tecssvins ihe fmai mm&tfc 
« eoaemsni from ins reqwesm Sat it ai&o shoutcs not u*s th« f«e. A west Kncwm way to deaf with this situation is caiieei 
''two-phase commr? or £PC. 

Iwo-phase commit works as foiiows. The fast phase vwxks the same as the iTisihcci desonbed above. The server 
sontis aii of the data io the mqijsster. Both repositories siars the fraasaciton (and appfopriste tiies; as »rtcommit$«d. 
Ti?o asivar ser-ds a fasafy-to-casma massage ir> the raquasier The requester sands Pack an ackriawiedgeaient. The 
ssivs; than coffsmss and sends the raqaosSsr a commit massage Whoa ins reauesier receives ins commit mesaaee, 
si eoaim:i& the fiie. 

it tPare is a ce;r: arnica; ion fetiare or other crash, ihe saqitesier mast chack back wth the ssrver ta deiern;loe itsa 
aiatas a* the transaction. The ae;vaf has fhs fast mm on this. Tao reqaesis; may have racosvaa a;i of the oata. Pai it 
it did not got she tsnal nisssags, it has noi commlReci. Tho ssiveroao go ahead and osiste fsiss (exoeet for iiansacisor? 
feaoatef rsaca ii coramits. siaca ihe iiias are known to have been fciiy transmitted eafore starting iha cycia. 

Taore are varustions towm fa f hs an Khioh enn as ssso to achieve ths same ottect. Per sKampis:. the server coaiO 
ase aii addttionat isvei oi eaerypiien ishsn tasasaariing a work to a eiient. Oaiy after toe ciieai sends a message ac- 
kneariisdgifjg racespi ctaas it send the key. The ciiwsf then sgraas tepay for tho digsfat work. The post;! of ihss vaisatsen 
is iaat ii proviciss a cioar audit traii tPat ins ciieni received the work. For trusted sy sisms. howeves: fhts variatioa ascts 
sc a isvei of encryption tor no reai gatn ia aceoumabifay 

Ttia tnsnsacison for specific asaga rights are now discussed 

The Capy Transaction 

-5S A Copy transaction is a rec-uesi to make one or more independent copies oi the work with the same or lesser 
asaga rigPss. Copy dstters irorr: the extraction sighs discussed iatar :n tfxsE it raters io entire dig:fai woiks or •sniife fofdars 
containing Osgiiai works A copy operation cannot be used io remove a portion of adtqitai work. 

* The iecjiieetisr sends ihe servar a n;assaga to snritsie ths Ccsjsy Trisnsacf ion. Tots massaga :ndk;ates ihe wx& io 
•so ao copied. ;ao version of the cocy right io fee sseo tor the transaction, the desisaaiioa acioi'sss intormairon i iccaiion 

iii a fokfe?} for piaesng tho work, too fife data ior ihe work {iaciedinn its sixe), and the number oi copses requested. 

♦ The repositories perform the common opening fransaatiea stops, 

• The server transmits ihe rsq^esteo' conion-s and data to the ci:snt according to the if an emission protocoi it a 
Next-8ei-Oi--R:qti!s has bean piovidad m iha varsiea o! ihs rsghi, these iiahts are transmitied as tha sights for the 

*s work Othar%tse ; ihe aghis of fhs oripsnai am fransm;iied. in any aveni, the Copy -O&Lint ftaid for ihe copy oi ino 
diqaa! work oasng sent ngat is sot to fhs namher-of-oopies reqtissted. 
» The reauesier loceids the wo- kcof}ier;is, daia : ai5d usage tigtns and stores the work, it records the date east time 
that Sao copy was made in iha properties oi tha Orgiiai vsork. 

♦ The repositories perform iha coalmen closing traa&aciion steps. 

;'C 

The Trsnsfef Trans«ctio« 

A Ttsnsfsr iraosaciion is a rcqaest io move copies of the work wiih the sisms or ierisar ijsiisga riphts to ansjiher 
foposifory. in contest with a copy transaction, this resaifs in removing fhs work copies from She ssrver. 

* Tha rsqussf or sends tha server: a messago to inrtinie the Transfer TrEiasactioa This messsipe inOicaiSs tha v^orfe 
io ae transferred, the version of the transfer right to be assd in the transaction, the destination addrsss information 
for piscina; She work, iha iiie daia for the work, and iha nyafhef of copies iavotvsd. 
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* Tm repositories perform she common opening ir^sactssn steps. 

* The n&tv&f trsmsmits the requested contents and date lo we requester according to ir;e tfarssmssssesfi protocol, it 
a Nsxf-Sst-Gt-Rtrjhts has been provided. those hghis are sremsrmtted m-m rughts tor m vsor*. Othorvsfiss. the 
r sghts d She oagina! am tsmsroitisd. 

S 

in mm cms, the Copy- Count n©jd tor the transmiits-d r^tj* are set to the numbsnohcopias requested. 

* The requester feeorsfc tne wo* eorrtssofs. data, and usage aphts and stores the work 

* The server decrements its copy count fey the mincer ot copses snvoivsd tn the irsnsaetion. 
f« * The repositories psrSorm She common dosing transaction steps, 

* if the nufnbss? of copses remaining <« she server is now zero. I; erases the diortal ssork from it* mernory. 

Th« Loan Th^nssctSors 

« A foan iransseifon is a mechanism for loaning copses os a dsgitai work. The maximum duration or the roan is de~ 
tesirsifVBSi fay an s$wm& mmmlm of the digital work, Works ate aetomstticaiiy returned «Uer a predetermined Um 
period 

* The requester seeds the sesver a message So infieae the Transfer Transaction This message indicates the wotH 
28 to fee ioaned. the version of the ioan right So ee umi in the transaction, the destination address intofrnation Px 

placing the work. She number of copies invofvod. she fife data tor the work, ana the parted of jhe ten, 

* The server wscics She validity of she requested Soars period and ends with an error If she period ;s no; vaird. Loans 
tor a loaned copy cannot extsnes beyond - m period of the oeg;nas loan fo tha server 

* The repositories perform the common opening transaction stops. 

* The server transmits ths rsgcestes sontsnSs artd daia fo the requester if a Next-Set -Of- R:gh;s has tsmn provided, 
those fignss are trsnseifftsd as the rights tor she vvofk. Oihervwse. ihe rrphts: of the o?i$wl are iransmiitoo:. as 
modfffed to reflect ihe loan ported. 

* Tt<8 requeues records the digiiai work consents, dare, usage nghts ; and ten period aod stores the work. 

* The server updates the usaos righie intormaf ion in the o'igiisi wosk to rsfseet the nuontesr of eopies foansd oui. 
st> ♦ The rspositories porform the eommon efoesng transaction steps. 

* The server apoases the usape aphis data tor ihe dipisat work This may preeiude use otthe wor-r nniii it is reiiJmod 
trom ihe ten. Ths user on me rsqeoster efattorm can now ess tee transforred copses of ihs dieriai work. A user 
accessing the onoinai raposrioiy cai?nei nao itso dtgiiai wofk , eniess ihere a;e rs>p(es rafaatriifjp Wtsat tmpeans 
next depends on she order of events in time. 

Case J if ti;a hirse of ihe ioan psrtoci ;s no; yet exhausted and ihe rsqeasf m sends ihe repository' a Return message. 

* The mum message snciedee ii?e requaste; ::de:5t:f:caiion. and she ;r«;nsaeiion iB. 

* Tihe srsjvei dscrsmeras this eopies-ir;-us;j tietd by ihe rajmoer ot copses inat were reinmed. {it ihe nuejeef of 
•so fJipitai works ttfasmwi >s prefer than the number acieaiiy honovfeci. ihis is treated as an en'or; Tbts step may 

no* make ihe work avaiiaPis ai ihe servor for other esors. 

* Tf5e teqsjestsf deseiwa;es tie copses arsd removes tris contents trom sis memory. 

Case S. if the time of ihe Sean period :s eshaes;ed and the requester fiss r;ot ye; ear;; a Beium message, 

■re 

* The sfifver ciesfemients the copios-in-uso tseid oy ihe siymner digstaf worKs thai wore borrcweo. 

* The rsquasssr aatomaieaiiy deactivates its copses ot the digital work, ft ;ermtnaies aii eerrent uees and erases 
ths digits: work coptes from memory:. Ohs qijestson is why a reqiiosiar wonid ever mum a work satim than 
tha parted o! iha ioan, ssnce it woeid be raiuread automaiicsiiy mymf. One reason tot eariy mum >s that 

5® ihere mijy fes a metered See which determines the cos) of ihe team Bstummg eariy may fsxiuce thai fee 

The Play TwwsscSSon 

A piay transaetron ss a mumi xo srse the conteois os a work Typicaiiy. to *ptay* a work ;s to sand ins dtpltai work 
ihrougt; some kind ot transducer suets as a speaker or a dispi&y device. The request impiies She :nientton ttrat ihs 
conienia wlii no! he eommunicateo ciigiiaiiyioany oihorsyaiere. For axarnpfe, they wiii not ha seni to a panteir fscofded 
on my digital insdium. refsinoo after ths transaction or sent to another rsoosiiory: 

Th;s imc: "piay" ;& natural tor exairspies fske piaysng musfc, pSayirsg a (mm, or playing a video game. The general 
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form ot play ir,mm %m s "p^yer* <s ami so use tfoe dsga&J «forit Howevsr. she teo-n ptay covers afi media arte Kinds 
ft! recordings. ThtiS oos woakJ "play* a dipitai wow. maaninp ;o render it for reading, or piay a cosflputer program, 
msaningto «xecu?« a. For s d^ftaj ?iCkel ifws piayer woato' bs a cflgita! sacket ajjsni. 

•5 ♦ The jeqaester ssjkJs the ssrvef a message to initiate the pfcajf smnsacticsa This massage inciters the work to be 
piaysd. th« version of the ptey right to is© used *s tss. trarss&eiioft . are sfemtfty of ifcs p&ysr bs^g ussd. and the lite 
data ka the work, 

* The nsrvsr ctiscks the vakrfiiy of ti«. piayer KteHWieaiiw and the eortpafcsitty ot the f&tyer identification wrth tbe 
piaysr specification in 5ns rt$st U ends with srs error if these are no! satisfactory. 

* *i>i5S repositories peitorm ids common opening ti&nsactson steps. 

* The ssrvot and racists? read and wiiiethedsoeks of data as; requested by fh&playst according to ihfittartsmtsssofi 
proseco:. The requester ptsys Jhs work contents, using jhe p&ysr. 

* Whan Sba piayer ss finished, teptaysr and -he -eqijesier remove ti;e contents from ibeit nssniasy. 

* Th« repository perform !hs oorrirnor; osostng transaction steps. 

Tbs Print TrsnaastiOH 

A Phot transaction is a roqys-sr to obtain 8ie contorts of a work for the purpose at render-iip, tnerts on 8 "printer" 
We use the terrrt "pdntei" to include the comrt®n casaof writing wrih ink on paps*. How»v«t. the key aspect of 'printing* 
ifi our ess of the term -s that i! makes a copy of toe digi-ai work in a place outside of tha profecte of usage rights. As 
wfeh m ftpfiis. mis msy rsqpsvs part»uiarau!toiZ&tton esrii^csios. 

Cnce a digitas work sa prs'SiS0 : ids ptibiish«f arid uses are bound cy sstetew copyright Saws a;a « effect. How»v«s. 
p!:o!-fi9 frioves the corh$o;;i ouiaide the cofstroi oi • spoaito-ias For exaiTipks. absoni any oshsf soiOffian-snt rnsGda- 
nisms, ancs a dspai w« is prinssd on paper, it can Pa copied m Ofdinary phoiocopying sinaobinas withoiii fnisrvsntior; 
« py a rsposuosy to coiieol uaags; i&m. it the pwtsr k> a dsgfesi diak is pwiM tarn ;hat dgifai copy is ousskte of th» 
ccntrai or csaps nghis. Botd the creator m<s in® user know this, aiibougii the creator does nof nscssssoiy <$m sacit 
consent io sycd copying, wdich may vioiate copyfigb; iaws. 

* The rcqijastor ssnds she server a message to a Print ; ran sect son. This message indicates the work to be 
as playsd. the sdsntiiy of tha printer beinc. used. ;no Sila dais for m§ wcrrk. and the mtt&m oi sxxsm in the t&c&m. 

* The stiver ehscKs !he vaSffiy oi thss pMrn idenisbcaiion and ihrs cofnpaSidiiiiy of -he pmw idrjntsfication w;;h the 
printer specification in she fight, ii snd& weft an error it iiiass ars nor saisstaciory 

* The raposiioiies ^srform ine corfsnon opening iransatsbn steps. 

* The server transmits bfocfcs of drsta according so ina inrrnsrnissson profocci. 
;k * yns rsqeastssf prints ids work contents, esing ids panser. 

* VVriijn ttie pisnter :& fitsishsd. the ptiMet arid the repuesiar rst?K>ve ihe oonfanta Iran tnsir tneraory 

* The r§positOi'ios pertom tee c®mors ciosieg transaction stops. 

Th© Backiup Tfaossction 

•re 

A Backup iransaetion i& a request to make a Packup copy of a digital work, as a protecrion apins? media tasters, 
in the ocntexi of rapoartonos. sacura backup aopica mm fram other issptoa tn mrss ways: tt> they are n;ado uneisr 
the oontrof oi a Ssckep irsmactssn rathsr than a Copy transaction. {2} they do no? count as rsguiaf copies, and (3) 
they arc r;oi lisabfs as regeiar copies, raanoraiiy. dack^p copies ste aiwrypiad. 

Aithocgd PacK»p cq>i«s rmy 8$ transferred or copied. dapsr«*r!g on their assigned trgdfs. tde otsiy way )o rrtaka 
them ussfv'i for piaysng. printing or an-iOadding is !a restore tnare. 

The output of a Backup oparaSors is poih an oncfyptsd data Site that contains she contents and description of a 
work; an« a restoration trie wi8t an encryption key for restoring th« encrypted cfsnfsnfs in many crises, tf-ie encrypfod 
data hie wocio have rtgnts. for "pfii^trng" it io a citsk outside oi tdc p;xii8ct:on systefrs. i^iying jyst on j;s oncrypiion for 
vb secar:ty Smt hiss coutd be stores srtyviSjsrs th;P: was physicaiSv safe and convenient: The rastoraiion his wroeid be 
held tn tee repository Ins fiia is necessary for tap restoration of a backep oopy: it may navs rights for transfer ssiwoen 
repositories. 

* Tna requester srenctti ;:he server a message to msrerre a backnp rranssctton. This message indicates ibs ajork ro 
ha backed up. tha vsissori oi the backup ti§M io de used in the trar-sactssi, the dasbnaison itddrsas into-maiion 
ior piaeioa the bjioknp copy, tne trie data for the work. 

* The repositories pertem-i th§ eo^rpon oppping transact*©* steps. 

* The serve: transmits she ieqttcsted contents and data to iba i^qoestar: It a Hexi-Set-C^Rsghts has bssn piWidad, 
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in sexm cases, st is coavenient to tse abie So archive fce iafqa, encrypted contsais to to secern- eiiiina siotags. 
such as s srragnato-opissai storage system or rnagnatK tape. This creation ci a iwwsiXBHory archive hie re as secure 
as rm encryption process. Such ncrt-feposrtofy arcnwa storsge is considered a torm o* "prtrtf truf and :s eontfoiieo' by 
?<5 ?, print t$$$ with a specrfssd "archwe-ptiRtei.'' An archiva-prlnter device :s psograrnrriad ;o save the encrypted easterns 
(but not the dascpon fife) oiiisne in such a way thai it car? ba retrieved 

Tha Restore Trsnsaetterr 

« A Restore transaction a a request t© convsn an <sf!trypt8d tsackup copy of & chgnai work m a asabisr copy A 
restore operation is srstendeSto be sissato eornpsnsate for catastrophe media fsjiws. Uks ass usaqe rights, restoration 
rsghts car; include teas and accsss tests fftdutiing authorisation checks. 

* The requester sends the serve; a message so snisiate a Ftestore transaction. This message sndisases the work io 
bo raster set, the vsrsrosi ot tsie «s$tote rtphi far at* transaction, the destination address intorrnation for pissing jhs 
work, and rhe fife dm for shs work. 

* TPs server wtte thai the conssnts tste ss avaiiaoie (j.s. a diqstai work corresponding so the request has been 
backed-up.? if st ;s not, « cods the transaction wttft an mot 

* The rsposttoffss pwform is'is comnw5 opsninp JfansaCilon sjsps. 

2S * Tha sesfvet retrieves the kay ircsm the ra^otatoj isse. i; decrypis the work rxwisrvte. *sca, «ns3 osjsga ngPtss 

* Tns sssvsr Sransmits ssi« rsqussted contents *nd dsts to m roqasster zeesxtimq so tha ta^smsssscn proiocoi. it 
a Nexi-SfJt-Df-RigPSs has bmn prxsvided, those are Uarmransd as the rights tor the work Osho<v»>se. a sot 
of deiaiiit rigrrra for backup f«es ot iaoGtsgsnai aro transrnirtad by iPe ssrvet. 

* Tha rcqricstsr stores the pi^stai wors. 

-Ji> ♦ The rspositorses psrforrf? the eommoR cto-sshg t?ansactk« steps. 

Th« Dsfete Waft&setSort 

-5S arosss works worses nave ossese mtf». 

* The requeue; &snci& the asrvet a message ;o !nst!«i« a Peters iiansacpon This rrsessage :od:c&i3s >hs wo? k to bs 
iSeieseci, ths version ol dsiote rsehi ior ins ;rans»ctson. 

* Tha repositories fHss'torrn in;; corrrsnof; ijpansijj tsansastron strsps. 
•*o ♦ The server Petenos the tsts. erasing s) from me rrrs system 

* TPs rspositosiss psriorrT: the common closing sraftsacaort stops 

Th* Directory Transaetion 

A Osfsctcsty transacSioo ss a reqs.<ssi tor imemxbon aaout ioidos's. P<gsia! wotKs, ar5d mw Parts This amosjnis to 
roughiy the sarce idea as protsfflion oociss sn a convemionai tsie sysrem kke TgsNEX. ejtcsot tha: n ss gsnsraissd io 
ti'is tut! powet ot tha access srsocitisatsorrs o' the usage siptris JsifKrisea. 

The Directory iransaeSifsn has iPrs irrspfiPan; roirs ai passrncj aioap dsscrspnans o? me nghrs anP iam assocsairsG 
mrt » *§itat wo*. Wtwn « t;ssr wamato sxmcma nghh Irss user smedace ot ftis reposstoty impiicitsy rnakss a dsracsory 
5® requess to detsrf??ina the vsrssons of tha right thai am avartabia. Typfcasty ?has;5 are pressntcd to tna user - s rich as 
with aiSofSirrr cnoess ot railine tor iassreising a right. Thus-, many directory s ran ssc • tons are invssshis to the user ano' 
ara exsressed as past ot the normsf ptoe«ss ot axercistng ari ngPts, 

* Tns requastsr ssncts ?:ha server a rrsessaga to snssate a Oireoxory transacsion. This message inpicaiss rha tits or 
•ss toio'as tha; ss it's root of tfta dfajctory reqaest aad tPe vemioti ot tha directory rsgfit used tor ttra transactors. 

* Tha server vertfses that She into rsnsri son ta aecassibie ro ine raqriestat: in pantceiJir «t does no; rahjfn the frames 
of any fiiss ihar im» s HtO£-NM^ status sn their psrscto-ry specifications, ana it does not return tbs parts ot any 
tdtders of «t«s that have Hi Q£ -PARTS n that; spaeiheaiion. ii the (nforrtBtioo is not aeeassidia. the sasvar ar^ds 
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the transacslon wan m em*. 

* The repastam psrforrfl !he aorsmefi ;> s i * 5 ^ 

* Ths ssmf sends ths rsqussiecs date i» ^ ^ » sU ~ > f ^ " ? i >m ^ -v 

* The requester records the data, 

•5 ♦ Ths -spossteftes pisribrra she common dosing Sran&isaion steps. 

Th« Folder Transaction 

A F.osdsr jrsnsactscrs is a r©q««s5 to crease or rename 3 teSdar. or to move a wxk between toroers. Togssiw wf8s 
f« Dsrsctofy fight;- Folder rights eonhoi the d&gres to iah>ch Of^nka^iofi of s sepositoty can accessed or modified 
from another reposluxy 

* The request sends she server a message so initiate a Folder iransactkm. This message srsdisates she foider trial 
ts ihs roeft of sfis folder request, me v»rsron -of tne soidisr righ- for !he ttaneaeuon. an operation, mi data. The 

« operation cars fee one of create, rersams, srsd move t«e. The o'aia are the specifications required for ins operation, 
such as a specification of a toidsr or digisai work ®m a rears®. 

* The reposstestss perform me sommon opening wansacttort steps. 

* The server performs ths requested opersttoo - creating a fokier. renaming a foieier. or mowig a warn between 
Sokiers. 

Sv * Tne repositories perform she cormxm dosing fransaesion steps. 
Th« Extract Transaction 

A extract transaction is a request so cop>? a part of a dlojta! work and to create a new wortk- containing if. Ths 
extraction operation <lifl»rs frtsm coping, in thaf it ear; be cased to separate a part d a d$t3i work from cJ-biocKs or 
sbaiis tttat place additional resinctiens cr ises on •;. The extraction operation tirifers horn me sd« operation m if*» 8 
doss not changs she contents of a work, only as smbeddlng tn s-bsceks- Extraction creates a new di«|8a: work. 

* Tps reqijessor sonas ihe server a nnsssa^ to an Extract traosaction This messsa^ axiscstM m oar; ot 
s>? the work to be e>«s!».etso ihe version o; ihs exisaet ntfti so be used si the tra^eactioe. ts«s dcsbeaiiw address 

rsfOHvsiifors tor pi:K:rsg ?ha pari as a nmt ws, this hie data tot sfee worse, mti this nurpbero? copriss wdsm$. 

* Tne rspesisoriss psrtorm the corrrrnoe open roe irarisaetasn steps. 

* The -server Sranismrta ;he reprjeaiee' corstarsis asset data So rise requester acrsordtng ;o ttse aarsswssscn pfsjtetxsl. if 
a Nsxt-Set-Oi-RiQhts nas mm provfdosi, ihoss rsgnts are i«msmm*3 as She rrphts for she new wors. Otherwise. 

;k ths fights of iheorigieai are transmitted. Th8Copy-Oo«n5 ftefdlor tnis fighl i&s.ot toihorsymter-d-cop^s rsquested 

* The requester recore's ttse coiiSsrsrs. daSa, and usage rights and srores the work, it reccicts the data and lime thai 
m«i work was made m the pfcpanies of the work 

* The reposisonss pssiorrsi ifje corsii'rron dosing Srarvsaetton stops, 

•*>■> Th« Embed Trsnsaeti»!-i 

M esTihrsct trsafisrsetiois is a raquaa; So mato a dspjtai work taeaorr:© a past oi arsoiher d)$m work or 10 add a shall 
d-Piock to ersahia she a®Lmq of fess by a hisirlbrsior of the work. 

*s * The requester sen<3s ;ne ssrver a message- to inrts-sta isn Errused Srarssaatro'-; Thts rsseaaaqe if!d:caiis:s thrs v«sdf to 
no smb&stSsd. She verston of the ssnbsd nohi to no used :n the transaciron. ins dosi-fiatios-! address sniormatsors 
tor piaoirsg itre pari as a a work, the tsiss data to; Sho work. ar;d the nusnbsr of copies involved. 

* The samsr ohecks ir-se ocivir:>i spiscitieatrfsns for air «r the fights- tn the part an« -he iSestmtfcsn. if sney ars meor-sv- 
patibirs. she server ends Sha irafSsacSion writ; an error. 

5® * This rispesartones perform ttse corrsrton openros) irarssas;s:on ssaps. 

* Tne ssrvef transmits the rearrested contents arsd dats so the requester according io the transrnlssion pi'osocoi. It 
a NexhSshOhRicjtsfs nas been provided, those rights are ttamwated as She rights for tne am ms% Csihsr^sse. 
iheflghiao- theoflgsnaiareSransrarrsed. The Copy •Co;js\5 t(erdfartt;;a right rs set ks the nsirnhssr-ot -ctspses fisqnesSed. 

* Tne reqisestar records the eonfsots. dais, and usage rights and embeds the work m the desiinatron Site, 
-s ♦ The reposiSofies perform She eorranoo eiosing transacsion steps. 
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Th« Edit TfasisseSissn 

An geist transaction s a reqees; to mafce a nsw cSgifesd work by copying. sesectittej anc; modifying portions of sn 
sxissing digifaf worst. This opsr&tton can aeiysity change ths contenss of a digisai work. The feincte d ctsangas mat are 
•5 permitted depend on She process being used kike She extraction opsr&iort, sdH operafes on portions of a dfgrisi work, 
in contrast wsth m extract operation, edit does net asm ihs HsMsorkscsstor* of sne week it only shabjjes tbe con tents. 
The kinds of cftariges permmed are deterrrisssd by she type specrricasion of ihe procssscr specified «n trte iights. in the 
curfsnliyprsi'sffsci embodiment an edit transaction changes the work iiseit and does m make a new work However, 
st wouid be a fessorwsfeSe variation to cause & new copy of She wors. 50 be made. 

* The roqneefer sends she server a message to initiate m Eds! transaction Th is rwssags indicates the work to be 
edited, me version erf fbe seM ngh; io m usees sn the tcartssctfon. fhs fife data for j^s work 'including as sfce). the 
process*iD to; the proceees. and the number 0! copies trwofvsd. 

* Th« server checks She compatibility of She process-ID to be used fey ihs reqijestar against any process-ID spssi- 
« ficatson 'm tR« fight, it tiiey arc- iocompatibfe. 8 sacs She transaction *m an error 

» The repositories perform tn© cotWicn opening transaction steps. 

* The reqeestar uses the process io change the consents of me di^al work as desired. {For sstampie. 8 ears select 
and dupilcaie psrts of it: comoine if witb oiber information: or oooipais funciioes based on ins intermaiion. Thrs 
ears ar;x>untio editing taxi, musia.orpietusesor taking whatever other steps are ijseful in cseasis>g a derivative work.) 

so * The repositories perform fhs cormxm closing fransaciion steps. 

The edit iransacslon © used so cover a wide range of kinds ol works. The casegoiy describes a process that takes 
as its input any person of a dsgitas work and then modifies sne input in some way. For example, tor tsxs. a process for 
eoitsig she t«« wouid recitfsre edri tights. A process for '®xmmtm<f or counwej words m tns text woufo sm bs 
coaskSeted edriirrg, for e rnesic fife, pfrxeasino coi:id snvoiva changing 'he pitch or or adding, revefbeiat:ons. 

or any <$tm audio eitsci For dsqita; video works, anyirsing mkfo aiisrs me ireags wocid rsquirs eo;; righis. Sxampies 
woufd be cote:ng. scaSiag. ex?rac.jlo§ &UU pftotos. seiocang and combmin^ Untmt silo story boards, shsifpersng ■,%>■.'>; 
sigr;ei ptooessing, and so on. 

Some crearora may wans to project ihs aasnenrjciiy of their works by iimrsng se« Kinds of processes ;naf nan be 
-Si> pertorrned on them, !f there are ao sdfi rights, fhen no prooessiag is aiiowed at sSf A processor idsntif ier cm be included 
to specify mm Kind of process is aiioweri if no process Kientrfser is apecitieci. then arbitrary pnxm$Gi& can be nsad. 
for an exampis of a spaciflc process. s< phosoorapiw msy want io siiow use 0! hie phoiograpSi but aiay oc* want it so 
be eoiorfxod A rnusiciar; may waaS io airow exiracSion oi poit:or-s of f?is wetk bu\ noi changs-sg o? me SonaiiSy 

;ss A uthor i£»f joa 7tm s«et ions 

There are many ways ihaS aijihorV' alien iransacfions can be osfined. in the ioitowiog. out preferred way is io stmpiy 
define Them m terms 0; oihsr iransacsioris shat we aiready need for repositories. Thus, $ is coavenreai somaiiines so 
apeak oi : 'asJ!hor»aiion •ransaciions : ' > but they are aef uaiiy made ;jpof Other irmsiJCtssns fha; repossioties aiready have 
•so A usage right can speoity an aethcrizaiion-tO, wnioh idensiiios an asihofi^atson object ta digsfa! work in a tsie ot a 

standard foraiat? that she repository mast have and which rf mass process. The authorization is given so ibe gsnene 
authorization for iickaSs server of She ieposifory whtch becsns to infeipref the aaiho;i^aison. 

As described earser. the acthoriKation oorifams. a server ideasifier. which may russ be the gsnenc authorization 
sofver or i- may be arsofher setvet. Witon a semoia authorization server ts required, it mm\ ooaSain a digital address, 
i • may aiao contain a digital cet iiiscate. 

ft a tsrnoie ausnorizasion server is inquired, mn ma ayihorur&jbn proc-ess hts\ pettormis ibe foiiowsnp steps 

* The generic aashofisation safvef aisempis to se: ap the camrnenfcations ohannei. (if #\$ channai eannos be set 
•up, tben aethorszafton Isiis wm m error) 

S5 » When ;he channel is m up, it performs a registration prsxess wish the remote repository {if iegisSiVinion fails, iban 
ibe authorization fails wish an error. } 

* VVhsn regisiration is complete, the generis gutrtofizaitart server invokes 3 "PSay" tnsbsaoiior^ witb the rsrnoie re- 
poeiSory : suppSy ing ibe aa;haii;?atiof} docarneni as fhe digitai work io be pieyad. and the airnoie i^uthorizalion server 
ia pfogtam) as the ^pfayer.* ;if the player cannof be found or hats some other error; fhsn fhe authorization falls with 

."• an etroi.) 

* The aulborizaiion server then "piayrf she authorizaf ion. This Involves decrypting it Oslng either She pubiic key oi 
the mmt repository that issued fhe cerfifioaie or the session key from ;ne repository thai transmitted it. The 
aisfSiorsaiion server Jhert perforn^s various Sssts. These tests vary acco-dlng to she authorization server They 
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inertids such stsps as eheckinp, issus and vs;;diiy sates of the gattolxstson and checking any hoHlsts of tewn 
m»M saihorxjaiions The iiamoriitatiori servr» maty require carrying out arsy other transactions on the rsposftary 
as mil men as shacking directories, pining soms parser* 'to supply a password, or pfey-ng same other dioj&i 
work. 8 may also invoke eome special process for checking ioterrrsaiion about iocasions or recent ©ygote. The 
•5 'scrip;* for such steps is ooniained within she auihohzasion server 

* it ail of m* requires steps are eofrsptsSsd sastsiactohiy: she asjfhohzaiion server eornpssSes She transaeim normally, 
signaling ShaS authorization is granted. 

The instati Transaction 

An sristaii ss'ansasiion ts a request! to install a dtgrfsst work as nmnabie software on a repository, in a typsca; case- 
ihs requester repository is a rerideor^ repository and me sssftvssre woutcs foe a mw Rind or nsw vsrssor? of a plays?; 
Aiso in a typical cass, the sosswar e would be copied to tti© syssera of tn© reqtisstsr repository before is ts mstatied, 

« • The reqoe&Ser sends the server an snstas; messaoe. Tore message inditirses siis swrk so be msiaflsd. the version 
of the fostali sighs beir-q invoked, arid ths tiie data tor the work ils-ictnding Sis six©;. 

* The repositories perform the eommof? waning transaction stops. 

* Ths requester extracts a copy os" ths &g$»i certificate to? the software, it she certificate csswoS be fosno or ths 
masse:' repository for the csrisrieaSe :s not known So tfts requester. She itxtnstaettoo ends ws&f so aw 

28 * The requester decrypts sne digital eersiiisate using ths poetic Key of the master repository recording the identity 
of the supplier and creator, a key for decrypting she software, the compatibility information, and a tamper-checking 
code: (This ssep certifies the sof;ware.) 

* The requestor decrypts me software using she key from ths esrfrtiessa m& competes a check code on it using a 
i-say hash tenchon. St she- chock-sods doss nc-i match she samponchecSnnO: code from me csrhheyie. sno instal- 
ls !at:Of! ta3>>sachon ends with an wx>t. ;Th:s s-ep assares sha: this cc5f«eriis of tfcs so-fvisafe ; ifscicdirsp Km vamxs 

scripts, have no! seen ismoered wfth ! 

* The ieqye&ssf roirtsvos. !h : o In&Sructos <n Sho compalMty-chocking sencs and loito^Sr ihorn is the sohwate is noi 
corfspaiihie wft the icposiiofy she ii?staiia-ion S-«r;sactiOi) er-sis with an error. ;Thss s-ep ei?eii<s piaSSbrrn compat- 
ibly) 

sc ♦ The ioqcoessr rsineves ths instructioris in ;he mstaiiaijori script arsdfoiicn'vs shorn it there is,«n error in ih« process 
{sai;n as tnsuirt«tem raaouroee;. -hsn !he ;?»n;;-5cti«i ends wNh so error. Mol# that the snsiaiiisiior; proceee puis the 
rsnjiahio software sn a piace in the repesisory where st is no ioager accsssibie as a *ork for exe?x;:&iriQ any ussgo 
rights other than the exect;-ion oi the soSnivaas as par; oS repository opera-ions if} earning oar oiher smris«ictK»« 

* Ths rssposiSoriss perform the common ciosine s-ansiictioo stops. 

as 

the Ursisisiaii Trssisactson 

Af? UnmsSaSi iransacsion is a request to remove software trmt a •oposstoiy. Sirsos crsooniroSSed or sicos reci removal 
of s;«i:«ari? trotrs a rt^milory co«!ci ccnrsprorrsise iia eehuvwai integrity ;nis step ;s controiieo. 

■to 

* 'i'fio isooosssr send-s iho sesver an UainsSaii rnessage This srtessage sndicaLss Sh.e vvork to be nninstailed. She 
ves-ssors oi tb© Uoinstaii righ! bsirsg invoked, and ths hie data lor She work pneiuding its ssre). 

* The repositories' perform ths common opening trsnssicsion sseps. 

* Ths requests; osstram a copy of tse digsiai c©r;iiicaSe for the software, if She cesniicate caonct he found or the 
njaster rsposttwy ior she esrtifiease ;e noi Hrsossm to sne req;)ester, the tninsae-ion eness wssn m error. 

* Ths requester shocks wheihor ths sotSwars is snsiatiod. it sho sottwws ;s no; instaSSso. !ha iransacSion ends m& 
ars error. 

* The requester decrypts she rfickai cernkcMe usmg the psMt ksy of thrj nmt»t reposiSory. recording the identity 
of the sappiier and creato;; a key lor dacryphnp she sofhvars. the coh)pat;hiii;y intoirria-ion, and a tarr-per-<;heekiog 

5® coae. (This step iscitisniicetes She csrtificaJion otths softwars.. sneindsng sho scrips for uriirssiHiiing :f ) 

* The requester decrypts the software using the key trom the csrsificats arid comprises a check cods on ;t using a 
■i-vssay hash tunctros't. if She chaek-eode does not match she ismpsooheckiiig code imm the cshstscate. She instat- 
tebao transaction ends srrSh an error. <Th«8i as ep sss seres sha! thss contersss of- ths sdbmw. mdwm% the venous 
scripts, hev's not heen tampersd wish,; 

* The requester retrieves the insSinctians m M\» mm\a®aSim seopt sine foiioirvs sherrs. if stsere is m ersxsf tr; tra& 
process -such as insijftictse) rssonrcess. then the transection ends wjih an error: 

* 'f'he reposisoriss peflom !hs common esoslcg t!«insactioo steps. 
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Claims 

1, A system for sseure ctetritwiton md control o* cSgitai works between fspos&ortes <scmprts:o<j- 

•5 rtmm fcf cteating usage fights, each instance of a usage tight representing a {specific instance of how a 

digita: work may fe* asses or distrfbated: 
means for stsachino, a created set of usage rights to a digii&i 

a ccuwmintc^iione medium for ceupttrtg reposstonss to eattbsn exchange oi repository irenssetbn massage: 
a plurality of generai repositories for storing and securely exchanging digit?:! works with attached usage rights. 
t<5 each of said gene;ai repositories comprising 

a storage meas?s for siomg drgiiai -mtks and their attached asago ngnts: 

an identification certificate tor indicating thai the associstsd g&mm r<spo5fioty is secure: 

an exieroat interface lor rernovably coupiing to said communications medium: 

a session initiation transaction processing nseaos tot astabiishing a sssutG m« trusted session wish anoitmr 
« repository, said session initiation transaction processing msans using said identification csititicafe: 

a usage transaction processing means having a requester mod® of operation lor gerveraring usage repository 
transaction messages to reqsjesi access so drgsiai works stored m another generai repository said usage 
repository transaction message specifying a usa^s right said usage transaction processing means further 
havmo, a server n;ods oi operation lot cteirsrfiimng - a raguest to; access to a drgsiai work siored if? said storage 
28 means may be granted., said request being granted oniy tt She usage right spesfised m md request ts aftachco 

to sard dtgriai work; and 

an inpur means eouptsd to said usage tmasacison processing means for enabling user crested signals to 
caase generation cl a usage repository transaction message to rsqijsst access So osgitat wwls 

3$ 2, The system as recited is? Ci&m f farther comprising a tendering systanv said tendering system comprising: 

Si rendering repository tea seeusety accessing dipiiai works from a genera) repository, said rendering repository 
comprising: 

a storage means for storing digital wsrss and their attached asage ngnis. 

m identification certitetts. said identification certificate tor indicating thai the rendering: repository is secure: 
an externa: interface tor t ernovaPry eoupiing to said communications mstfksm: 

a session initiation transaction processing means for estabtishied e secure and trueied sesesers with s: gensf&i 
repo?iitory ; said session ir;i:iat:oti transaciion psx^assing means using sasd identification certilicaie; 
a i.ssago transaction processing means tor gsrsc-rating csage repository transaction messages to request ac- 
cess to digits:! works stored in e generai repository said usage reposriofy transaction message specifying a 
usage tight: 

an irtptit means cocpied to said usage transaction processing msans tor snadiing user created signais to 
cause gseeraiion of usage rspositoty tiSrssaction ;nessagss to seqaes: access » digiiai works ; 
a rendering device for rendehog digiiai wor ks 

3, The system as recsed a\ Ciaim i whemin said reesns for creating usage rights ss further for the specification oi 
different seis of usage tights so be attached 'ts digiiai vsorks when a cortespondirrg usage tight is extscssed. 

4, The system as recited in Ciam; 1 wherein sasd usage rights grammar farther rfeiines means for specify sag conditions 
*s whien mrist Pe satisfies beiors a usage right nsay ha exeretsed and sard usage transaction processing sneans tn 

said server mods ts tertner comprised of means tor rjstsrmis-ing it spscitied conditions tor a usage right am satisfied 
before access is granted- 

5, The system as teeited sn Ciastn 1 wherein a first ussge nghi enabtes oopytrsg of a digital work arid specification of 
a revenue owner who is pasd a fee whenever a copy of said digital work is tnada 

S, A method for csmfaoWng <Ssslrfeot«oo and use of dipifat wdr"ks comprising ihs steps ot: 

a) attaching a set oi usage fights to a digitai work, each of sard usage rights dstinsng a specific instance oi 
how 8: digitai woik may be ased or distrihafed. said asago nght specify mg one or mora conditions which must 
be satistiad in order tot sard usage right: to be eKeressed rsnd a next set of usirge ngnts to he attached to a 

districted digissi work: 

bt stoiing ma digsfat work and its attached usage lights in a first repository: 
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c} a sacond repository initiating a fsqassr. to aecass said digaa* work In said first rapossrory said rsquss! 
jcter»Myi«9 a usaga nqnt rsprssefliing t»# said saeord r§f}os>tay dastres io ma md «»§83l work: 
d>s8id iifss repository f«cavif?^.said rssjussttroro md seecrsd repository: 

e) said first repository determining if ihs ietemifisd us&gs sight s& attached to said digital wo*; 

f) sad first repository donysng access to sad dsgrtsi wxk s said (denized «&age tight is not attached to sad 
di^tei work: 

<$ if said identified usaqe sigh- « aitachsd !o said digital work. said tc&< repository tiett»rnining if cessans 
speoiisea t>y said usage ftpht are-satisfiod. 

P> ft said conditions are rx* satisfied, said first repository denying access to said dipjtai <m&: 

ii ff said cowfcitofis at© satisfied, said first repository aifachrog a mux set of usage rights to said digital work. 

said fssxt sat of usage rights specffystis} how said scjcond repostoy way use and distnbure sad digital wxk: and 

;5 said mi repository transmitting sate d^risi woa; sad said assorted ne:<; set of «sa$s rights to sad sscood 

rapossfory. 

7, „ IX. > \f — tv > P lift" „<P Wv'l i - US ^iv'v M i^ \ fc- ^SvS d nj - 

el j said second repository tniisaling astsoJishmsnt of s trasioa session with said t<rs? repository: 

c2) said !ii st repository psftotrrwg a ss5 of rogsstaii ;or ■ transactors maps, writs said SBeor rd repository asocessful 

comptetson oi said ssiot registration transaction stops indicating {has saidtirsr repository rsa trusted repository. 

c3l satd second fop-osliory periomisng said set of rsojstrattw transaction sieps *ih said first repository sac- 

eass'sl completion d said setd registration transaction steps Indicating thai sad second repository is a treated 

repository: 

c4j it said first repository and said second repository each successfully complete said set of rsgisti'atiort slaps, 
ssasct first artd seoorsd repository exchaoqsig session aswsypiiori and datsypisrsn keys tot secure iraiissriisaiCK) 
of subsequent communications bstweon said first and sacona rspository-. snC 

eSs ii said fifst raposiiory or said second t&cmmy cannoi specassiciiy compiata sad so! of rsgistfsiion iraas- 
aot:or; staps. tarrriiriattag sad Boston. 

8, A sysisirt tor conifotsrts distridUtioa and usa of digiiai workiS aornsfising:: 

niaans for attaching usage ngfcis to aaid digifat work, said Psa^e posts radicating how a rscipieai may uss 
artd am aabsaquariiiy disiitbutis said digrtai wxk 

a commiiiSKSfioos m-Kfiam to; coupiing rsposiior ;as to srsabis dtstfiOation of digital worsts: 

a piufaisty of fepositorias for inanaging axedanga of digiial works based on usage fights attached to said dioitai 

wcaks, each o? said piaraiity oi repositories comprising: 

a st&rago msaas for stoang cftgitat works and tnaif attached asaga sights: 

a processor operating responsive to codsd insirsoriorss: 

a m&mty maarss costpiad to said processor for storms} coded iOBiruciioa to snaPta rsjad procossor io rspar;?te 
in a tirsf sarvar reads tor pracssssng access requests fa diosfai works and for atiacnsng -jsags rsgnts to dsgitai 
vvorks wiiea is^snsmrtsec! io arso-thes of sssd pfraaisfy of repostioass, a second raqaesler mods for initiating 
roqaesis to access dioitai works, and a session mriiaibn tnocte lor astatslishmg s trusted session wlfh anottter 
of said plurality of rsposiiories over said comma meatier >s madiam; 
a edek: 

a repository sntertasis for coupiiag io aa>d cormiunscstions tnecSom 

9, TPe system as iacitsd rrs Cialm S !urii;er ooniprising a piursSity oi rende-'iag systems to; rendering of digital vvorks, 
each oi said randating sysfarns cottiprlsing 

a repository for sscurs' rscoipt of a digital work: and 

a randarirtg davlca having mmm lor convprflng digital works to signais saitatjts for randering oi said digitai 
works, 

10, A rnatiriod for sacara accsss oi digital wx>tks stored or; a sarvar reposiiory: said drgifat works havinp associaisKf 
therewith one or mots ssags ngtils for specriyirig how said digital work may bo csao' or diatribatad, said matt^od 
comprising tho ataps of: 



a) a raqaaatiiig reposiiory parfarnitng a first registration Iranssaiion with a servsr rapositcay, said flrai regis- 
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tf«!lo« irapsaction tor ■ssiabtishipg to mtSsw^t rsp-psitory that said repealing repository is irissiworthy: 
b} concutr«f% mp a), said mv&t tspcmoty respeso&ng vtfh a sscona rsgisirsison sra^saciiosv sad 
sscors registration irsosacSicn for esiKbSisS-iiog »o sasp rsqpssiing repository that sa«S ssrvsr repository so 
truswonhy* 

«} il s«har sa«i Jirsi ie-giairasion tfsnsasison or mkS secerns tegettstton transaction fatis, sad server fapoaiiory 
tfenystfj sccsss So said digsiai worse 

tJ> rf said -iitsi rsq'ssUalJOfi irssnsaeiioa smcS said second rag:stfBt:on iraasaotbn as© aucoeastai. sad ;aq;j©aiinq. 
repository ttiimg a usage transassiop vsiih r«sp«ct to a digital wsttt storpd m said $€tv«f f3isor>ii»ry. 88*d 
usage transition MMm% s t'p«us%t !o aecass a digiiai work and specifying a parteiiar usage right: 
s> csstemiriiog -t said uaays isan&sdson way fee eompte'.sd by cot ■panng sski partcuter usage fiohi specified 
in said tssags irarssacfion and tssags ngSits associated with sad drgSai work: 

f) it ssid paf iioijisf usage right is 005 one of said usage rsgiits associated wan said dtoita! work, denying access 
to said digilai wosk: aad 

9) 8 sa;d pariitsiitsr usage t%pt ss one ot s?jtd tJsoge ngnfs assoc«ts<i wiift said «<g«3f wstk. graniing acnose 
to said dtg:i«i work and jseftoffn^g usage Sfartsactson steps associated v»«h sates parttcutef usapo fight. 
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tSm ^MgiUil Work *ttghftK- (Eighth? 

1 562— Elgbt ™ (Sight-Code {Copy-Count} {Comrol-Spee} {Tims-Spec } 
IkmmsSpec} {Fee-Spec}} 
f 50J— MIght-Csxte : ~ Bender-Cods | Ti-sjsspert-Cods fFiJ«.Maxtag»m«Rt- 
Codaj Benv&tf^Works- Code | C<m%ur3tem-Code 
fS8*~~ fl*B<i«r-C©d* : ~ [ Play : {Player Player-ID} { Prtott {Mater; Pimter-SI>}] 
TSOS — Trmsport-Csdo : » (Copy | TrasslVr } lm& {H*m&iniag-Higfcts; 

N^Set-^SightslHiKex^Copy.RjgteKe^-Set-of'RSghts)} 
?S8S-wf11«,||8aai*meBS-C©d* ;« Backup fBaek*Up-Copy-Eigfeis; 

He^-Set-of-Rights} | Basts** j Betete | Pelder 
J Dimisry {Name Mida-Locs.1 | Hidfe-S*m«t«} 
{Parts: Hide-Local | Hide--Rerfiote} 
f 507— -Derivativ«*Worts- Code ; « SExtr&ct \ Embed } EdUIProoess: 

Pr oessg-lD)] {Nexi-Copy-Rights ; 
Nexi-Set-ofEigkte} 

f$m~~~ N«xi-Sel-of'Eigkts;^ {{AM: Set-Of-Exghts)H<»eM«: 

Sat-Gf-Rjghts.5} {(Replam; $*t-Of- Rights )K(Keep; Set-C* Rights >} 
f $10— Copy-Co«at : ~ (Copj®8:p5»ittv«>i8teg«r | 0 1 Unlimited) 
?S?I — Cdateol'Spec :» (C<sstralc {Hestrictable j Uareswfctsfek} 

{U«charg»abie j CtafwM*}) 
If 12— TIme-Sp«e™ ({FixM-Interval { SMiag* totem! } Meter-Tha*} 
Until: Expiration-Date) 
1St3*-^¥ixwl4M®rml :~ From: Start-Tim* 
tSU— SMi&g-Iatsrw! : ~ .fetervalc Uss-Bstfation. 
fSIS--Meter-Tiiae:» TsHse-BeiraaiBiag: BeiaairJagvUse 
ISIS— Ae«ess«Spec ; « {{SC: &scanty-Cfcss) {Aathotisatloa: AatlscdmtJOs-lD*} . 

{Ofber-Autbftrfeatios: Authorlmtioa-ID*! {Ticket; Ticket-ID}} 
JSJ7-v- Fee-Spec: - (Schemed- ffiseoasit} Begiikr-Fse-Spec { Stih*duled-F*«-Spee } 
M^kup-Spec 

?S?8— Schedaled-Discoan*: ™ Seh^uled-Disceunt: (Scheduled-Discottaf: 

{Tisae-Spsc Perceat&ge)*) 
fSIS— EegHk3t.F«e-Spec ;~ ({Pee; j toee&tive: } IPay-Use-Spee { Meterad-Eats- 

Spec 1 Best-Price-Spc j C&H-ror-Prioe-Specl 
{Mis: Money-ttoit Par: T1m«-8pe«HMax: 
Maaey-Uaii Pet; Tiass-Spoc} To: Account-ID} 
?529-~-P«r-Us«-Spae; * Per-Ose: Maaay-uast 
f 52t ^Meterfc&Bate-Spe*. ; Mgfered: MoSsy-lMtPer: Tiaae-Spec 
IS22-- Best-Prk.e-8pee : ~ Best-Price: Moaey-asii Max; Maaey-uiut 
Caa-FoT-Price^pec;^ Caft-For -Frke 
f 524~~ Sehedated-Fee-Spec: = (Schedule; (Time-Spec ReguUr-Fee-Spec}* j 
f S2S---M«3:rlsup-Sp«c; ~ Markup; percentage Te: Aceoast-XB 
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